Privacy Policy
Your Privacy Matters
How we collect, use, and protect your personal information
Last Updated: 9 January 2026
Our Commitment
Protecting Your Data
Buffer is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our commission income protection services. We comply with the Protection of Personal Information Act (POPIA) and other applicable South African data protection laws.
We collect information that you provide directly to us when you register for a Buffer policy, submit a claim, or contact us for support. This includes:
• Personal identification information (name, email address, phone number, ID number)
• Business information (brokerage name, years of experience, FAIS registration details)
• Financial information (bank account details for payouts, commission statements)
• Policy and claim information (policy details, claim documentation, cancellation letters)
• Communication records (emails, phone calls, support tickets)
We use the information we collect to:
• Provide, maintain, and improve our insurance services
• Process your policy applications and manage your coverage
• Evaluate and process claims
• Process payments and send you payment confirmations
• Send you policy documents, updates, and important notices
• Respond to your inquiries and provide customer support
• Comply with legal obligations and regulatory requirements (including FSCA regulations)
• Detect, prevent, and address fraud, security, or technical issues
• Send you marketing communications (with your consent, which you can opt out of at any time)
We do not sell your personal information. We may share your information only in the following circumstances:
• With service providers who assist us in operating our business (payment processors, cloud hosting, email services) under strict confidentiality agreements
• With our underwriters and reinsurers as required for policy administration
• When required by law, regulation, or legal process (including FSCA requirements)
• To protect our rights, property, or safety, or that of our customers or others
• In connection with a business transfer (merger, acquisition, or sale of assets)
• With your explicit consent
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:
• Encryption of sensitive data in transit and at rest
• Secure payment processing through PCI DSS compliant providers
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and privacy
However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:
• Policy and claim records: Retained for 7 years after policy termination, as required by South African insurance regulations
• Financial records: Retained for 5 years as required by tax and accounting laws
• Marketing communications: Retained until you opt out or request deletion
After the retention period, we will securely delete or anonymize your information.
Under the Protection of Personal Information Act (POPIA) and other applicable laws, you have the right to:
• Access your personal information and request copies
• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal and regulatory requirements)
• Object to processing of your personal information
• Request restriction of processing
• Data portability (receive your data in a structured, commonly used format)
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Regulator of South Africa
To exercise these rights, please contact us at privacy@bufferprotect.co.za.
We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Our services are intended for registered insurance brokers in South Africa. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have collected information from a minor, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@bufferprotect.co.za
Phone: +27 21 555 0101
Address: Buffer HQ, 3rd Floor, 80 Strand Street, Cape Town, 8001, South Africa
Information Regulator: complaints.IR@justice.gov.za
Questions?
We're Here to Help
If you have any questions about our Privacy Policy or how we handle your personal information, please don't hesitate to reach out to our privacy team.