Privacy Policy

Prospera Short Term Loans (Pty) Ltd (registration number 2026/163990/07) is responsible for processing personal information described in this Policy.

Contact: info@prosperaloans.co.za | 064 846 4823.

Depending on your interaction with us, we may collect:

• Identity and contact details (name, ID or equivalent, email, phone, address).
• Employment and financial details used for affordability and risk assessment.
• Application and account data (documents, product selections, repayment data).
• Technical and usage data (device, browser, IP, log activity, cookie data).
• Support and communications records.

We process personal information to:

• Receive and assess loan applications.
• Perform identity, fraud, affordability, and compliance checks.
• Prepare pre-agreement statements, loan agreements, debit order instructions, and repayment schedules.
• Manage accounts, repayments, and collections where required.
• Provide customer support and respond to complaints.
• Send service communications and legally required notices.
• Protect platform security and prevent misuse.
• Generate internal reporting and improve product performance.

We process information where needed for:

• Performance of a contract or pre-contract steps requested by you.
• Compliance with legal and regulatory obligations.
• Our legitimate interests in secure, responsible operations.
• Your consent where consent is the required basis.

We may share information with:

• Credit bureaus, verification providers, and fraud prevention partners.
• Payment, banking, cloud, analytics, and communication service providers.
• Professional advisors and auditors under confidentiality duties.
• Regulators, law enforcement, courts, or authorities where legally required.

We use Cloudflare Turnstile as part of our abuse prevention and account-security controls. Turnstile may process technical and interaction data to distinguish legitimate visitors from automated traffic. Cloudflare's Turnstile privacy disclosures are available in the Cloudflare Turnstile Privacy Addendum.

We require third parties to use data only for authorized purposes and with appropriate security safeguards.

We do not keep borrower data indefinitely. Where no longer needed for an active lending, servicing, dispute, tax, audit, or regulatory purpose, borrower records are scheduled for secure deletion after 5 years of no account activity, unless a longer retention period is required by law or a live dispute, complaint, or enforcement process.

Deletion is not available on demand where we still have lawful retention duties. When the applicable retention period ends, data is securely deleted, anonymised, or archived in a restricted form where lawful retention still applies.

We use administrative, technical, and organizational controls designed to protect personal information, including role-based access restrictions, encrypted transmission, private document storage, audit logging, monitoring, and incident response procedures.

Borrower documents are stored in private object storage and delivered through controlled server-side access paths. No method of transmission or storage is completely risk-free, but we continuously improve our controls.

Subject to applicable law, you may request to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Object to or restrict certain processing activities.
• Withdraw consent where processing relies on consent.

We provide authenticated access to core borrower records, agreements, and secured document links through the borrower portal. Deletion requests are limited where retention duties still apply.

To exercise rights, contact us at info@prosperaloans.co.za. We may request identity verification before actioning a request.

If we become aware of a personal-information security compromise, we investigate, contain, document, and assess the incident in line with our incident response process.

Where notification is legally required, we will notify affected individuals and the Information Regulator or other competent authority within the timeframe required by applicable law.

If services or vendors process data outside South Africa, we apply contractual and technical safeguards intended to ensure equivalent protection standards.

Our lending services are not directed to minors. We do not intentionally collect personal information from individuals who are legally ineligible to contract for our services.

We may update this Privacy Policy to reflect legal, technical, or operational changes. The "Last updated" date will show the latest version.