Our Commitment
At L&L Investments and Loans, we respect your privacy and are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This page explains how we collect, use, store, and safeguard your data, and outlines your rights as a data subject.
What is POPIA?
POPIA is South Africa's data protection law that gives individuals control over their personal information. It requires organisations to handle personal data lawfully, transparently, and securely. The Act also grants you specific rights regarding your information, including the right to access, correct, or delete it.
Information We Collect
We may collect the following categories of personal information:
- Identity information: name, surname, ID number, passport number, date of birth.
- Contact details: physical address, postal address, email address, phone numbers.
- Financial information: bank account details, income, credit history, employment details.
- Special personal information: only collected with your explicit consent where necessary (e.g., health information for funeral cover).
- Website usage data: IP address, cookies, browsing behaviour (see our Cookie Policy).
How We Use Your Information
We process your personal information for the following purposes:
- To assess and process applications for loans, investments, funeral cover, and debt collection services.
- To verify your identity and conduct credit checks (with your consent).
- To communicate with you about your accounts, products, and services.
- To comply with legal and regulatory obligations (e.g., NCR reporting, anti‑money laundering).
- To improve our website and customer service.
- To send you marketing communications (you may opt out at any time).
Legal Basis for Processing
We process your information only when we have a lawful basis to do so, such as:
- Consent: you have given clear consent for us to process your data for a specific purpose.
- Contract: the processing is necessary for a contract we have with you (e.g., a loan agreement).
- Legal obligation: the processing is necessary to comply with the law.
- Legitimate interests: the processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests.
How We Protect Your Information
We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, or destruction. These include:
- Secure servers and encrypted databases.
- Firewalls and intrusion detection systems.
- Access controls and staff training on data protection.
- Regular security audits and vulnerability assessments.
Sharing Your Information
We may share your personal information with:
- Service providers: IT providers, payment processors, credit bureaux, debt collection partners (ASC Attorneys Inc).
- Regulatory authorities: NCR, FSCA, SARS, or other government bodies when required by law.
- Professional advisors: lawyers, auditors, insurers.
We never sell your personal information to third parties for marketing purposes.
Your Rights Under POPIA
You have the following rights regarding your personal information:
- Right to access: request a copy of the information we hold about you.
- Right to correction: ask us to update or correct inaccurate data.
- Right to deletion: request that we delete your data, subject to legal retention requirements.
- Right to object: object to the processing of your data for direct marketing or on grounds relating to your situation.
- Right to restriction: ask us to restrict processing in certain circumstances.
- Right to data portability: receive your data in a structured, commonly used format.
- Right to lodge a complaint: with the Information Regulator if you believe we have violated your rights.
How to Exercise Your Rights
To exercise any of your rights, please contact our Information Officer:
- Information Officer: [Name of Officer – e.g., "Thabo Nkosi"]
- Email: privacy@lnlinvestments.co.za
- Phone: 013 007 9085 (ask for the Information Officer)
- Physical address: Justicia Trust Stand No. 195, Bushbuckridge
- Postal address: P O Box 3212, Justicia 1289
We will respond to your request within 30 days, as required by POPIA.
How Long We Keep Your Data
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Typically, this means we keep data for the duration of your relationship with us plus any applicable statutory retention period (e.g., 5 years for financial records).
Cookies and Website Tracking
Our website uses cookies to enhance your browsing experience and analyse site traffic. By continuing to use our site, you consent to our use of cookies. You can manage your cookie preferences through your browser settings.
Changes to This Policy
We may update this POPIA compliance page from time to time. The latest version will always be available on our website, with the effective date shown at the top. We encourage you to review it periodically.
Lodging a Complaint with the Regulator
If you are not satisfied with our response to your data protection concern, you have the right to lodge a complaint with the Information Regulator (South Africa):
This page was last updated on 18 March 2026.