– Securtiy and Privacy Policy –

Unisheq (Pty) Ltd collects and processes the client’s personal information pertaining to the client’s company, financial, and project needs. The type of information will depend on the need for which it is collected and will be processed for that purpose only. Whenever possible, Unisheq (Pty) Ltd will inform the client as to the information required and the information deemed optional. Examples of personal information we collect may include, but is not limited to:

• The Client’s (own, employees, students, customers, contractors) identity number, name, surname, address, postal code, marital status, email address, telephone number, qualifications, affiliations, accreditations and employment history.
• Health Information, Security Information.
• Plant and Equipment assessments, assets, and resources
• Description of the client’s residence, business, assets, financial information, banking details, etc.
• Any other information required by Unisheq (Pty) Ltd, in order to provide clients with an accurate analysis of their Insurance needs.

Unisheq (Pty) Ltd also collects and processes the client’s personal information for marketing purposes in order to ensure that our products and services remain relevant to our clients and potential clients.

Unisheq (Pty) Ltd aims to have agreements in place with all product suppliers, insurers, and third-partyservice providers to ensure a mutual understanding with regard to the protection of the client’s personal information. Unisheq (Pty) Ltd service providers, clients, and users will be subject to the same regulations as applicable to Unisheq (Pty) Ltd.

With the client’s consent, Unisheq (Pty) Ltd may also supplement the information provided with information Unisheq (Pty) Ltd receives from other providers in order to offer a more consistent and personalized experience in the client’s interaction with Unisheq (Pty) Ltd.

For purposes of this Policy, clients include potential and existing clients.

Unisheq (Pty) Ltd is not responsible for the management of Personal Information collected by its customers through the use of products and services offered by Unisheq (Pty) Ltd. However, Unisheq (Pty) Ltd employs reasonable measures to ensure the safety and protection of its customers’ information. Unisheq (Pty) Ltd employs strict policies and procedures to ............

The Client’s Personal Information will only be used for the purpose for which it was collected and as agreed. This may include:

• Managing occupational health and safety standards and protocols.
• Managing of client accounts.
• Managing and administration of personnel (security, time and attendance, performance, disciplinary measures).
• Monitor and track skill development and competency training.
• Providing products or services to clients and to carry out the transactions requested.
• For underwriting purposes.
• Assessing and processing claims.
• Conducting credit reference searches or- verification.
• Confirming, verifying and updating client details.
• For purposes of claims history.
• For the detection and prevention of fraud, crime, money laundering or other malpractices.
• Conducting market or customer satisfaction research.
• For audit and record-keeping purposes.
• In connection with legal proceedings.
• Providing Unisheq (Pty) Ltd services to clients, to render the services requested and to maintain and constantly improve the relationship.
• Providing communication in respect of Unisheq (Pty) Ltd and regulatory matters that may affect clients.
• In connection with and to comply with legal and regulatory requirements or when it is otherwise allowed by law.

According to section 10 of POPI, personal information may only be processed if certain conditions, listed below, are met along with supporting information for Unisheq (Pty) Ltd processing of Personal Information:

• The client’s consents to the processing: - consent is obtained from clients during the introductory, appointment and needs analysis stage of the relationship.
• The necessity of processing: in order to conduct an accurate analysis of the client’s needs for purposes of amongst other credit limits, insurance requirements, etcetera.
• Processing complies with an obligation imposed by law on Unisheq (Pty) Ltd.
• The Financial Advisory and Intermediary Services Act (‘FAIS’) requires Financial Service Provider’s (‘FSPs’) to conduct a needs analysis and obtain information from clients about their needs in order to provide them with applicable and beneficial products.
• Processing protects a legitimate interest of the client — it is in the client’s best interest to have a full and proper needs analysis performed in order to provide them with an applicable and beneficial product or service.
• Processing is necessary for pursuing the legitimate interests of the Unisheq (Pty) Ltd or of a third party to whom information is supplied — in order to provide Unisheq (Pty) Ltd clients with products and or services both Unisheq (Pty) Ltd and any of our product suppliers require certain personal information from the clients in order to make an expert decision on the unique and specific product and or service required.

Unisheq (Pty) Ltd may disclose a client’s (own, employees, students, customers, contractors) personal information to any of Unisheq (Pty) Ltd companies or subsidiaries, joint venture companies and or approved product or third-party service providers whose services or products clients elect to use. Unisheq (Pty) Ltd has agreements in place to ensure that compliance with confidentiality and privacy conditions. Unisheq (Pty) Ltd may also share client personal information with, and obtain information about clients from third parties for the reasons already discussed above. Unisheq (Pty) Ltd may also disclose a client’s information where it has a duty or a right to disclose in terms of applicable legislation, the law, or where it may be deemed necessary in order to protect Unisheq (Pty) Ltd rights. Unisheq (Pty) Ltd may disclose client information in the event of an emergency situation, only if it is in the best interest of the client and/or user, personnel, employees, and students.

It is a requirement of POPI to adequately protect personal information. Unisheq (Pty) Ltd will continuously review its security controls and processes to ensure that personal information is secure. The following procedures are in place in order to protect personal information:

• Unisheq (Pty) Ltd will appoint an Information Officer who is responsible for the compliance with the conditions of the lawful processing of personal information and other provisions of POPI. Should it be required a Deputy Information Officer will be appointed to assist the Information Officer in his functions.
• This Policy has been put in place throughout Unisheq (Pty) Ltd and training on this policy and the POPI Act has already taken place.
• Each new employee will be required to sign an employment contract containing relevant consent clauses for the use and storage of employee information, or any other action so required, in terms of POPI.
• Every employee currently employed within Unisheq (Pty) Ltd will be required to sign an addendum to their employment contracts containing relevant consent clauses for the use and storage of employee information, or any other action so required, in terms of POPI.
• Unisheq (Pty) Ltd archived client information is stored on a secured AMAZON server which is also governed by POPI, access is limited to authorized personal.
• Unisheq (Pty) Ltd product suppliers, insurers, and other third-party service providers will be required to sign a service level agreement guaranteeing their commitment to the Protection of Personal Information; this is however an ongoing process that will be evaluated as needed.
• All electronic files or data are backed up on an AMAZON server which is a secure server that protects third party access and physical threats. Unisheq (Pty) Ltd continuously review the security controls and processes.

CONSENT to process client information is obtained from clients (or a person who has been given authorization from the client to provide the client’s personal information) during the introductory, appointment, and needs analysis stage of the relationship.

Clients have the right to access the personal information Unisheq (Pty) Ltd holds about them. Clients also have the right to ask Unisheq (Pty) Ltd to update, correct, or delete their personal information on reasonable grounds. Once a client objects to the processing of their personal information, Unisheq (Pty) Ltd may no longer process said personal information. Unisheq (Pty) Ltd will take all reasonable steps to confirm its clients’ identity before providing details of their personal information or making changes to their personal information.

The details of Unisheq (Pty) Ltd Registered Office are as follows:

POSTAL ADDRESS: 2 Hood Avenue, Rosebank, 2196, Suite 6, Floor 1

PHYSICAL ADDRESS: 2 Hood Avenue, Rosebank, 2196, Suite 6, Floor 1

E-MAIL ADDRESS: info@unisheq.com

WEBSITE: www.unisheq.com

Amendments to, or a review of this Policy, will take place on an ad hoc basis or at least once a year. Clients are advised to access the Unisheq (Pty) Ltd website periodically to keep abreast of any changes. Where material changes take place, clients will be notified directly or changes will be stipulated on the Unisheq (Pty) Ltd website.

This manual is made available in terms of Regulation Number R. 187 of 15 February 2002. The manual is available at the offices of the South African Human Rights Commission and shall be published in three of the official languages in the Government Gazette.

This manual is made available in terms of Regulation Number R. 187 of 15 February 2002. The manual is available at the offices of the South African Human Rights Commission and shall be published in three of the official languages in the Government Gazette.

This manual is made available in terms of Regulation Number R. 187 of 15 February 2002. The manual is available at the offices of the South African Human Rights Commission and shall be published in three of the official languages in the Government Gazette.

If Unisheq (Pty) Ltd searches for a record and it is believed that the record either does not exist or cannot be found, the requester will be notified by way of an affidavit or affirmation. This will include the steps that were taken in the attempt to locate the record.

The prescribed forms and fees are available on the website of the Department of Justice and Constitutional Development at www.doj.gov.za under the regulations section.