Privacy Policy
LEGION CAPITAL PRIVACY POLICY
Effective as of: 21 May 2024
Your privacy is extremely important to us. LEGION CAPITAL has prepared this Privacy and Security Statement in accordance with the Protection of Personal Information Act No.4 of 2013 (“POPIA”). The purpose of this Privacy and Security Statement is to outline how we collect, use, store, share, and otherwise process personal information and rights in relation to that information as has been put in place to protect you.
This Privacy Policy relates to information collected by LEGION CAPITAL (referred to in this Privacy Policy as “LEGION CAPITAL” “we” or “us” or “our”) through your use of our website (www.legioncpaital.co.za) and our Services, features, and information available on our website and through our dealings with you (which are collectively referred to in this Privacy Policy as the “LEGION CAPITAL Service”).
If you do not agree to our use of your personal data in line with this policy, please do not use the LEGION CAPITAL Services.
SCOPE OF THIS PRIVACY POLICY
Please be aware that this Privacy Policy does not govern all the information LEGION CAPITAL may process. Our commitment to customers and service providers is governed by a separate Data Protection Policy.
In all instances we are committed to transparency with our customers and employees, and to protecting your data privacy.
WHAT INFORMATION DO WE COLLECT?
You will be required to establish an account in order to take advantage of certain features of the LEGION CAPITAL Service. If you wish to establish an account, you will be required to provide us with information (including personally identifiable information and non-personally identifiable information). In addition, we may obtain your personally identifiable information from you if you identify yourself to us by sending us an e-mail with questions or comments and in our face to face dealings with you.
Depending on your use of the LEGION CAPITAL Service, we may collect three types of information: personally identifiable information, special personal information and non-personally identifiable information.
PERSONALLY IDENTIFIABLE INFORMATION
Personally identifiable information identifies you or can be used to identify or contact you. Examples of personally identifiable information may include your name, IP address, company name, job title, address, e-mail address, telephone number, and billing and credit card information.
SPECIAL PERSONAL INFORMATION
Special Personal Information is particularly sensitive information. It includes religious/philosophical beliefs, race/ethnic origin, trade union membership, political persuasion, health or sex life or biometric information. It also includes criminal behavior to the extent that it relates to the alleged commission of an offense or related proceedings. We will only process Special Personal Information as permitted in accordance with POPIA.
NON-PERSONALLY IDENTIFIABLE INFORMATION
Non-personally identifiable information is information, any single item of which, by itself, cannot be used to identify or contact you, which may include demographic information (such as age, profession, company industry, gender, current location, or postal code), IP addresses, browser types, domain names, and statistical data involving the use of the LEGION CAPITAL Service. Certain non-personally identifiable information may be considered a part of your personally identifiable information if it were combined with other identifiers (for example, combining your postal code with your street address) in a way that enables you to be identified. But the same pieces of information may be considered non-personally identifiable information when they are taken alone or combined only with other non-personally identifiable information (for example, your account preferences).
WHY DO WE NEED YOUR PERSONAL DATA?
We use your personal information to enable us and our service providers to deliver the product or service you have requested from us, and/or ancillary service, and to fulfil our contractual and legal obligations. This may include, but is not limited to:
- Onboarding you if you are a new client, processing your instructions, enabling payments to be made, investigating complaints, sharing your information internally and with our service providers that we rely on to deliver the product/service, process your instructions or otherwise provide an ancillary service to you, and generally for the purposes of meeting our responsibilities to you and the administration of any agreement that we have concluded with you or any investment that you have made with us;
- helping us identify you when you contact us and for communicating with you (including for the purposes of sending required reports and other information, and responding to your requests);
- ensuring you meet the requirements for investment into a particular product;
- providing you with publications (including, without limitation, articles, bulletins, podcasts, greeting cards, visual or audio recordings of webinars) and/or invitations to attend and/or participate in any LEGION CAPITAL events or webinars;
- enabling us to trace you (or your beneficiaries’ whereabouts) when necessary;
- helping us to detect and prevent fraud, money laundering and financial crimes. This includes the recording of calls for regulatory purposes and providing personal information to third parties who assist with the verification of your information or the obtaining of additional information as is needed for us to meet regulatory obligations;
- meeting our contractual, legal, and regulatory obligations, including providing personal information to third parties, such as local and/or international governmental, regulatory and non-regulatory bodies, law enforcement agencies and any other person with whom we are required, by law, to share the information;
- using personal information to conduct research for our internal purposes or to service products, or to help us improve the quality of our products and services;
- for any other purpose related to us conducting our business, including:
- keeping and maintaining financial, client and operational records. Including sharing personal information with third parties that provide us with professional or record keeping services;
- general administration, financial and tax purposes, and to enable us to transact with third party service providers;
- the management and auditing of our business systems and operations;
- reviewing the safety, usability, use and availability our website;
- business continuity and disaster recovery purposes;
- enabling us to adhere to best practice guidelines, where appropriate.
INFORMATION WE COLLECT AUTOMATICALLY WHEN YOU USE THE SERVICES:
We collect information about you when you use our Services, such as browsing our websites and taking certain actions within the Services, including:
Your use of the Services: We keep track of certain information about you when you visit and interact with any of our Services. This information includes the features you use; the links you click on; the type, size and filenames of attachments you download from or upload to the Services; frequently used search terms; and how you interact with others on the Services.
Device and Connection Information: We collect information about your computer, phone, tablet, or other devices you use to access the Services. This device information includes your connection type and settings when you install, access, update, or use our Services. We also collect information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers, and crash data. We use your IP address and/or country preference in order to approximate your location to provide you with a better Service experience. How much of this information we collect depends on the type and settings of the device you use to access the Services.
Cookies and Other Tracking Technologies: LEGION CAPITAL and our third-party partners, such as our advertising and analytics partners, use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across different Services and devices. For more information, please see our Cookies and Tracking Policy, which includes information on how to control or opt out of these cookies and tracking technologies.
Log files: We collect non-personally identifiable information through our Internet log files, which record data such as user IP addresses, browser types, domain names, and other anonymous statistical data involving the use of the LEGION CAPITAL Service. This information may be used to analyse trends, to administer the LEGION CAPITAL Service, to monitor the use of the LEGION CAPITAL Service, and to gather general demographic information. We may link this information to personally identifiable information for these and other purposes, such as personalizing your experience on the LEGION CAPITAL Service, and evaluating the LEGION CAPITAL Service in general.
INFORMATION WE RECEIVE FROM YOU
The main source of the personal information we have about you, is you. We collect this information as part of our client/supplier on-boarding process and when you correspond with us (via our website, email or over the phone). We rely on you to let us know when your personal information changes.
We may obtain your personal information from third parties. These include, but are not limited to, parties that:
- supply information to assist us to monitor and prevent money laundering and financial crime
- obtain background, criminal and/or credit checks where applicable
- you have appointed to manage investments/business on your behalf or are entitled by law to do so.
We may also source information on you that is available in a public record to assist us in complying with our regulatory, legal, and contractual obligations.
INFORMATION WE RECEIVE FROM OTHER SOURCES
We receive information about you from other Service users, from third party services, and from our business and channel partners.
Other services you link to your account: We receive information about you when you or your administrator enable third-party apps or integrate or link a third-party service with our Services. For example, you or your administrator may also integrate our Services with other services you use, such as to allow you to access, store, share and edit certain content from a third-party through our Services. For example, you may authorize our Services to access and display files from a third-party document-sharing service within the Services interface. The information we receive when you link or integrate our Services with a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in these third-party services to understand what data may be disclosed to us or shared with our Services.
Other partners: We may receive information about you and your activities on and off the Services from third-party partners, such as advertising and market research partners who provide us with information about your interest in, and engagement with, our Services and online advertisements, or in cases where you give such third parties permission to share information with us or where the information is publicly available online or through your device or browser data.
LEGION CAPITAL’s use of information received, and LEGION CAPITAL’s transfer of information to any other app, from Google APIs will adhere to Google’s API Services User Data Policy, including the Limited Use Requirements.
WHO MAY WE SHARE YOUR INFORMATION WITH?
We do not sell any data, including your personal data. We will only collect and process your personal data in accordance with applicable data protection and privacy laws. We need to collect and process certain personal data in order to provide you with access to LEGION CAPITAL Services. If you registered with us, you will have been asked to check a tick box indicating your agreement to provide this data in order to access our services. This consent provides us with the legal basis we require under applicable law to process your data. You maintain the right to withdraw such consent at any time.
We may share your personal information with the following categories of recipients:
- Companies in the LEGION CAPITAL group
- Foreign and local governmental and regulatory bodies, financial and non-financial regulators and ombudsmen, commissions of inquiry, law enforcement agencies, industry bodies, and any other person with whom we are required, by law, to share the personal information
- Your authorised representatives and agents
- Corporate social investment partners
- Contracted third party service providers that enable us to deliver a product or service to you or provide a product or service to us to enable and/or enhance the functioning of our business.
These include, but are not limited to, parties that provide the following types of services:
- Fund Administration
- Capturing, organising, reporting, printing, and storing of data and/or records
- IT, information systems and security
- Professional services providers (for example auditing firms)
- Communications
- Conducting AML and FICA related checks or otherwise assisting with establishing and / or obtaining additional information on you and your affiliated parties, or assisting with the prevention of fraud and / or financial crime
- Customer satisfaction, quality assurance and research services
- Health and safety
- Facilities management
- Event organisation
- Marketing and advertising
- Banking, trading, and transaction services
- Staff augmentation
We are not able to control all processing of your personal information by third parties, particularly in cases where those parties are not our contracted service providers (like regulators for instance or where you instruct us to provide your personal information to another party on your behalf). We take all reasonable measures to ensure that the third parties that we contract with have appropriate security and privacy safeguards in place.
DO WE TRANSFER PERSONAL INFORMATION OUTSIDE OF SOUTH AFRICA?
LEGION CAPITAL may transfer your personal information outside the borders of South Africa but will only do so in accordance with the requirements of POPIA. Steps are taken to ensure that the third parties we use are bound by laws, binding corporate rules or binding agreements that provide an adequate level of protection and uphold principles for reasonable and lawful processing of personal information referenced in POPIA.
OTHER DISCLOSURES
If you use our website and follow a link from it to another website, different privacy notices/statements may apply. Before you submit any of your personal information to another website, you should read that website’s privacy notice/statement.
HOW LONG DO WE KEEP YOUR INFORMATION FOR?
We may hold your personal information after your relationship with us ends.
We will at your request, return to you or destroy, all your personal information and may, after receiving such a request, retain copies only to the extent required by applicable law or regulation or reasonably required for a lawful purpose related to our functions or activities, subject to us continuing to meet our obligations regarding the processing and safeguarding of such personal information. If you don’t submit such a request to us, we shall retain your personal information in accordance with our retention policies for as long as we consider appropriate in our discretion or, for so long as is reasonably required for any lawful purpose related to our functions or activities, provided that we then continue to comply with our obligations in relation to the processing and safeguarding of your personal information.
Regarding our back-up procedures, please note that the integrity of our back-ups is essential to our operations and to our clients, suppliers, and other stakeholders. Deleting single data entries from compressed back-up files may jeopardise the integrity of the entire back-up file and may negatively affect our ability to recover data for business continuity and disaster recovery purposes. Should the personal information you want deleted be stored in back-up files, we will let you know if it is possible to delete this data. Access to our back-up files is restricted and is not used in any of our production (live) systems, unless required for business continuity or disaster recovery purposes.
YOUR RIGHTS AS A DATA SUBJECT
You have certain rights regarding your personal information that are afforded to you by law. These rights are not without limitation and there may be circumstances where you won’t be able to exercise these rights. Where applicable you have the right to:
- Request confirmation on which of your personal information is / has been collected and information on the identity of all third parties or categories of third parties who have / have had access to it (subject to any legal or regulatory obligations preventing us from providing the information to you).
- Request the correction of your personal information held by us at any time.
- object to the processing of your personal information or withdraw consent once given to LEGION CAPITAL. LEGION CAPITAL will advise you of the consequences of that objection/withdrawal. LEGION CAPITAL might not be able to give effect to an objection/withdrawal if the processing of the personal information was and is permitted by law, you provided consent to the processing, and our processing was already conducted in line with your consent or the processing is necessary to perform contractual/legal obligations.
- You may want to discontinue receiving communications from LEGION CAPITAL. While this may mean that you will not receive product or service information that may be of interest to you, we will respect your wishes not to receive these communications. If this is the case, please e-mail us at informationofficer@saiy.co.za and specify that you would like to be removed from the LEGION CAPITAL e-mail database. You will also be provided with an “unsubscribe” link in communications we may send you.
- Although we would appreciate the opportunity to first deal with any complaints you have about our processing of your personal information, you have the right to lodge a complaint with the Information Regulator if you think that we have infringed any of your rights. You may contact the Information Regulator at:
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email Address (general enquiries): inforeg@justice.gov.za
Email Address (complaints): complaints.IR@justice.gov.za
SECURITY
We take the management of privacy risk seriously and aim to mitigate the risks associated with processing personal information as far as possible. We take all reasonable technical and operational precautions to prevent the loss and/or misuse of personal information. We can, however, not guarantee the security of any information you transmit to us electronically and you do so at your own risk.
We employ various measures to protect the confidentiality, integrity and availability of personal information and review the adequacy of these measures on an ongoing basis. These measures cover:
- Network and device security
- Physical security
- Encryption
- Access and password controls and monitoring
- Acceptable Use policies
- Data Breach Response Procedures
- Adherence to best practices and standards
- Third party contracts contain appropriate security and confidentiality obligations
Note: Whilst every reasonable care has been taken to ensure the accuracy of the information contained in this Privacy and Security Statement (“Statement”), LEGION CAPITAL does not guarantee its accuracy nor that it will remain accurate. LEGION CAPITAL shall not be liable for any losses or damage suffered arising from reliance being placed upon any of the contents of this Statement. We reserve the right to amend this Statement at any time, and all such amendments will be posted on the Site. Unless otherwise stated, the current version shall supersede and replace all previous versions of this Statement. Please check the Statement regularly to see if any updates or changes have been made. By continuing to use our website and interact with us, you are confirming that you have read and understood the latest version of this Statement.