Privacy notice - Two Mountains

Two Mountains Underwriters I306 is a Micro Insurer and Two Mountains Financial Services (Pty) Ltd is a licensed Financial Services Provider, with FSP No: 8706.

At Two Mountains (“Two Mountains”, “we”, “us” or “our”), we are committed to protecting your privacy and ensuring that your personal information is collected and used properly, lawfully, and transparently in compliance with the Protection of Personal Information Act (POPIA).

This Notice explains how we obtain, use, and disclose your personal information and aims to inform you of your rights and how to exercise them.

This Notice sets out:

Who we are
What information we collect and from where we collect it
The purposes for which we use your information
Our aim to provide ongoing insurance and burial services
To whom we disclose your information
How we safeguard your information
Your rights to access, correction, and deletion of information
Changes to this Notice
How to contact us
The Information Regulator’s contact details

WHO WE ARE

In this Notice, “Two Mountains Underwriters” and “Two Mountains Financial Services (PTY) LTD” or “Two Mountains” refers to the company that operates in South Africa and offers insurance and burial services.

THE INFORMATION WE COLLECT

We collect and process your personal information mainly to provide you with access to our insurance and burial products and services, to help us improve our offerings to you, and for other purposes explained below. You must provide us with the information that we request; failing to do so may prevent us from entering into a relationship with you or assisting you.

When you provide us with information about third parties (for example, your spouse, beneficiaries, and/or dependents), we will process their personal information to issue a policy or benefit and pursue their legitimate interest. You warrant that such information is accurate and that you have obtained their permission to share it with us for the purposes set out in this Privacy Notice. If you are providing consent for a minor (under 18 years), you confirm that you are competent to do so.

We only collect personal information that is necessary for the purposes stated and relevant to our insurance and burial product offerings.

Sources of information:

Directly from you, e.g., when applying for products, submitting enquiries, or contacting us.
Third parties, including:
- Credit reference and fraud prevention agencies, law enforcement agencies.
- Other insurers, to prevent fraudulent claims.
- Other companies within the Two Mountains , only to enhance the services and products offered and where you have not objected.

We take all reasonably practicable steps to ensure your personal information is complete, accurate, and up-to-date. You can update your personal information by:

Logging on to our secure website: www.twomountains.co.za
Sending an email to: privacy@twomountains.co.za

We may also collect website usage information via cookies, which include IP address, visit details, device information, and approximate location information. See our Cookies Policy for more information.

PURPOSES FOR WHICH WE USE YOUR INFORMATION

We may use your personal information for the following purposes, limited to our insurance and burial products:

To provide products and services, carry out transactions, and maintain our relationship with you.
For assessing or processing claims purposes.
To confirm and verify your identity, address, and banking details.
To verify authorized users for security purposes.
To maintain the accuracy of your personal information.
For operational purposes, including claim checks and fraud prevention.
To trace you if uncontactable purposes.
To conduct market or customer satisfaction research, statistical analysis, and audits.
In connection with social responsibility or legal proceedings.
To comply with legal, regulatory, and industry code obligations.
To conduct sanction screening against mandatory and non-mandatory sanctions lists, and share such information with regulators or entities within the Two Mountains if applicable.

ONGOING INSURANCE AND BURIAL SERVICES

We may use your information to inform you about other insurance or burial products that may be of interest. You may opt out of these communications at any time:

DISCLOSURE OF INFORMATION

We may disclose your personal information to:

Service providers involved in delivering insurance and burial services, bound by confidentiality and privacy agreements.
Third parties, including credit reference agencies, fraud prevention agencies, and law enforcement agencies.
Other insurers to prevent fraudulent claims.
Other entities within the Two Mountains Group, where appropriate and not objected to by you.

We may also disclose information where required by law, industry codes, to protect our rights, or in the context of a merger, acquisition, or divestiture.

INFORMATION SECURITY

We are legally obliged to protect your personal information and prevent unauthorized access or use. Security measures include:

Physical and network security
Secure access and communications
Security obligations for contracted third parties
Retention and safe disposal of information
Monitoring access and investigating security incidents

We may transfer your information to other countries for processing or storage, ensuring the same level of protection applies.

YOUR RIGHTS

You may exercise the following rights:

Access to information

You have the right to request a copy of the personal information we hold about you. To do this, simply contact us at privacy@twomountains.co.za and specify what information you would like.

Please note that any such access request may be subject to a payment of a legally allowable fee.

View our PAIA (Promotion of Access to Information Act, 2 of 2000) manual, here.

Access: Request a copy of your personal information by emailing us at Privacy@twomountians.co.za
Objection: Object to certain processing by emailing us at Privacy@twomountains.co.za
Correction: Request updates or corrections to your information by emailing us at privacy@twomountians.co.za
Deletion: Request deletion, subject to legal or business requirements by contacting us at privacy@twomounatins.co.za
Automated Decision-Making: You may query decisions made about you using automated processing.

CHANGES TO THIS NOTICE

We may amend this Notice from time to time. Please check our website periodically for updates.

CONTACT US

For questions, concerns, or information about this Notice, contact us at: 0800 668 539 and email us at privacy@twomountains.co.za

INFORMATION REGULATOR

You may lodge complaints with the Information Regulator:

Website: https://inforegulator.org.za/
General enquiries: enquiries@inforegulator.org.za
Complaints: POPIAComplaints@inforegulator.org.za

CONFLICT OF INTERESTS AND GIFTS POLICY

Access the policy here.