Privacy Policy

Who we are

This Privacy Policy is issued by Weekly Innovations (Pty) Ltd, a private company duly registered in the Republic of South Africa under Registration Number 2025/457006/07, trading as Weekly OneFive (referred to in this policy as "we", "us", "our", or "Weekly OneFive").

We operate a private short-term lending service accessible via our website at onefive.co.za. For the purposes of the Protection of Personal Information Act, 4 of 2013 ("POPIA"), we are the Responsible Party in relation to the personal information we collect from you.

This policy applies to all personal information we process in connection with providing lending services, evaluating loan applications, managing client accounts, and communicating with clients, whether collected through our website, by email, by phone, in writing, or in person.

What information we collect

We collect the following categories of personal information, depending on your relationship with us:

We collect personal information directly from you when you complete our loan application form, communicate with a consultant, or log in to your account. In limited cases, we may supplement this with information from publicly available sources for identity verification purposes only.

Why we collect it (purpose)

We process your personal information for the following specific purposes:

• Assessing your loan application — verifying your identity, evaluating affordability, and deciding whether to extend credit
• Managing your loan — calculating repayment schedules, recording payments, sending account statements, issuing invoices
• Communicating with you — confirming applications, sending payment reminders, responding to queries, delivering formal notices
• Recovering amounts owed — including sending arrears notices, formal warnings, and final demand notices where applicable
• Legal compliance — meeting our obligations under the National Credit Act, FICA, POPIA, and tax legislation
• Record-keeping — maintaining the records required by financial legislation
• Operating and improving our service — managing our website, preventing fraud, and improving client experience

We do not use your personal information for marketing to third parties, and we do not sell or rent your personal information to anyone.

Legal basis for processing

We only process your personal information where we have a lawful basis for doing so under POPIA. The lawful bases we rely on include:

• Contract performance — processing is necessary to enter into or perform a loan agreement with you
• Legal obligation — processing is required to comply with South African law, including financial record-keeping under FICA
• Consent — where you have given explicit, informed consent (for example, when submitting a loan application)
• Legitimate interest — where processing is necessary for our legitimate business interests (for example, fraud prevention or debt recovery), and those interests are not overridden by your rights

You may withdraw your consent at any time, but doing so may mean we cannot continue to provide services to you.

Who we share it with

We treat your personal information as confidential. We only share it in the following limited circumstances:

• Our consultants — authorised staff involved in managing your loan account
• Service providers — trusted third parties who help us operate (e.g. our website hosting provider, email delivery services, payment processors). These providers are contractually required to protect your information
• Legal and regulatory authorities — where we are compelled by law, court order, or regulatory requirement (e.g. SARS, Information Regulator, NCR)
• Legal and professional advisers — where we require legal or accounting advice regarding your account
• Debt recovery agents — if your account is referred for recovery, to the extent necessary to pursue the debt

We do not transfer your personal information outside South Africa unless we have your consent or it is otherwise permitted under POPIA (for example, where our service provider's servers are outside South Africa but offer equivalent protection).

We do not sell, rent, or trade your personal information to any third party for marketing or any other purpose.

How we protect it

We take reasonable and appropriate technical and organisational measures to protect your personal information against loss, unauthorised access, modification, or disclosure. These measures include:

• Encrypted connections (HTTPS/TLS) for all data transmitted via our website
• Password-protected access to client accounts
• Restricted staff access based on role and responsibility
• Regular software and security updates
• Secure, monitored hosting infrastructure
• Written confidentiality obligations on all consultants and service providers

While we take information security seriously, no online system can be guaranteed completely secure. You share your information with us at your own risk, and you are responsible for keeping your own account password confidential.

How long we keep it

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law.

In general:

• Active loan accounts — for the duration of your loan agreement plus 5 years after the account is closed, settled, or paid off
• Loan applications that are declined — for 5 years from the date of the decision
• Correspondence — for 5 years from the date of the communication
• Website logs — typically 90 days, unless retained for security investigations

The 5-year retention period is consistent with our financial record-keeping obligations under the Financial Intelligence Centre Act, the Tax Administration Act, and the National Credit Act.

After this period, we either destroy your personal information securely or anonymise it so that you can no longer be identified.

Your rights

Under POPIA, you have the following rights in relation to your personal information:

How to exercise your rights

You can exercise any of the rights listed above by contacting our Information Officer:

We will respond to your request within a reasonable time and in any event within 30 days of receiving it, unless we need more time, in which case we will let you know.

To process your request, we may need to verify your identity to make sure we are not disclosing your information to someone else. We may ask you to provide additional identification before we act.

There is no fee for exercising your rights, unless a request is clearly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or refuse to act.

Cookies & website tracking

Our website uses cookies and similar technologies to operate correctly and improve your experience. Cookies are small text files stored on your device.

Types of cookies we use

• Essential cookies — required for the website to function (e.g. keeping you logged in)
• Functional cookies — remember your preferences to improve your experience
• Analytics cookies — anonymously count visits and understand how the site is used (if enabled)

You can disable cookies in your browser settings, but parts of the website (such as logging in) may not work properly without them.

Data breach notification

If we reasonably believe that there has been unauthorised access to or acquisition of your personal information, we will notify you and the Information Regulator as soon as reasonably possible, in line with Section 22 of POPIA.

Our notification will describe the nature of the incident, the possible consequences, the measures we have taken in response, and recommendations for steps you can take to protect yourself.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects when the most recent changes were made.

Significant changes will be communicated via the email address we have on file for you. We encourage you to review this policy periodically.

Complaints & regulator

If you are not satisfied with the way we have handled your personal information, please contact our Information Officer first (privacy@onefive.co.za) so we can try to resolve the matter directly.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:

Contact us

For all privacy-related enquiries, access requests, corrections, or complaints, please use the dedicated channel below. For general questions, use our standard contact details.