Buffer shield logo

Privacy Policy

Your Privacy Matters

How we collect, use, and protect your personal information

Last Updated: 9 January 2026

Our Commitment

Protecting Your Data

Buffer is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our commission income protection services. We comply with the Protection of Personal Information Act (POPIA) and other applicable South African data protection laws.

1. Information We Collect

We collect information that you provide directly to us when you register for a Buffer policy, submit a claim, or contact us for support. This includes:

• Personal identification information (name, email address, phone number, ID number)

• Business information (brokerage name, years of experience, FAIS registration details)

• Financial information (bank account details for payouts, commission statements)

• Policy and claim information (policy details, claim documentation, cancellation letters)

• Communication records (emails, phone calls, support tickets)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our insurance services

• Process your policy applications and manage your coverage

• Evaluate and process claims

• Process payments and send you payment confirmations

• Send you policy documents, updates, and important notices

• Respond to your inquiries and provide customer support

• Comply with legal obligations and regulatory requirements (including FSCA regulations)

• Detect, prevent, and address fraud, security, or technical issues

• Send you marketing communications (with your consent, which you can opt out of at any time)

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With service providers who assist us in operating our business (payment processors, cloud hosting, email services) under strict confidentiality agreements

• With our underwriters and reinsurers as required for policy administration

• When required by law, regulation, or legal process (including FSCA requirements)

• To protect our rights, property, or safety, or that of our customers or others

• In connection with a business transfer (merger, acquisition, or sale of assets)

• With your explicit consent

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of sensitive data in transit and at rest

• Secure payment processing through PCI DSS compliant providers

• Regular security assessments and updates

• Access controls and authentication measures

• Staff training on data protection and privacy

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Policy and claim records: Retained for 7 years after policy termination, as required by South African insurance regulations

• Financial records: Retained for 5 years as required by tax and accounting laws

• Marketing communications: Retained until you opt out or request deletion

After the retention period, we will securely delete or anonymize your information.

6. Your Rights

Under the Protection of Personal Information Act (POPIA) and other applicable laws, you have the right to:

• Access your personal information and request copies

• Correct inaccurate or incomplete information

• Request deletion of your personal information (subject to legal and regulatory requirements)

• Object to processing of your personal information

• Request restriction of processing

• Data portability (receive your data in a structured, commonly used format)

• Withdraw consent where processing is based on consent

• Lodge a complaint with the Information Regulator of South Africa

To exercise these rights, please contact us at privacy@bufferprotect.co.za.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our services are intended for registered insurance brokers in South Africa. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have collected information from a minor, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@bufferprotect.co.za

Phone: +27 21 555 0101

Address: Buffer HQ, 3rd Floor, 80 Strand Street, Cape Town, 8001, South Africa

Information Regulator: complaints.IR@justice.gov.za

Questions?

We're Here to Help

If you have any questions about our Privacy Policy or how we handle your personal information, please don't hesitate to reach out to our privacy team.