First Africa Life (Pty) Ltd (“First Africa Life”, “FAL” or “we”, “us”, or “our”) is committed to protecting personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).
This Privacy Notice explains how we collect, use, disclose, retain, and protect personal information relating to visitors to our website, applicants, policyholders, beneficiaries and claimants.
This comprehensive notice details our data practices for firstafricalife.co.za, term life policies, claims, and related services.
About First Africa Life
First Africa Life provides affordable term life insurance to South African families, ensuring financial protection without savings components.
Registered as a financial services provider with the Financial Sector Conduct Authority (FSCA), we process data responsibly under POPIA’s 8 conditions: accountability, lawful processing, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation.
Information We Collect
We collect personal information essential for term life underwriting and policy management, including:
- Basic details: full name, ID/passport number, date of birth, gender, marital status.
- Contact info: email, phone, postal/physical address.
- Financial data: income, beneficiaries, employment history.
- Health/medical history (for risk assessment, with explicit consent).
- Biometric data (e.g., voice recordings for verification, if used).
- Device/website data: IP address, browser type, cookies, usage analytics.
Special personal information (e.g., health, race for redress programs) is processed only with consent or legal justification under POPIA Section 27.
Data sources include you, medical professionals, credit bureaus (e.g., TransUnion), and fraud lists.
Lawful Basis for Processing
Processing is lawful per POPIA Section 11:
- Consent (e.g., marketing, sensitive health data).
- Contract performance (policy issuance, claims).
- Legal obligation (FICA, FAIS compliance).
- Legitimate interests (fraud prevention, analytics).
- Public interest or responsible party’s duties.
We minimize collection to what’s necessary (data minimization principle).
How We Use Your Information
Your data enables:
- Underwriting term life policies and calculating premiums.
- Policy administration, premium collection, renewals.
- Claims assessment and payouts to beneficiaries.
- Fraud detection, anti-money laundering (FICA/AML).
- Regulatory reporting to FSCA, Prudential Authority.
- Personalized marketing of term life products (opt-out anytime).
- Statistical analysis (anonymized) for product improvement.
Further processing aligns with original purpose or compatible ones, notified if needed (POPIA Condition 3).
Any further processing of personal information will be compatible with the original purpose of collection or otherwise permitted by POPIA. Where required, we will notify data subjects and obtain additional consent.
Sharing and Disclosure
We disclose data only as required:
- Service providers: reinsurers, IT administrators, auditors (bound by POPIA-compliant agreements).
- Affiliates: none, as a standalone term life provider.
- Regulators: FSCA, SARS, Information Regulator.
- Third parties: credit bureaus, medical experts, law enforcement (legal basis only).
- Business transfers: in mergers (with notice).
No sales of data; international transfers (e.g., cloud servers) use binding corporate rules or adequacy decisions (POPIA Section 72).
We do not sell personal information.
Cookies and Tracking
Our site uses cookies for functionality, analytics (Google Analytics), and preferences.
Essential cookies can’t be rejected; others require consent via cookie banner.
Manage via browser settings.
Data Security
POPIA Condition 7 mandates reasonable safeguards:
- Encryption (data at rest/transit), firewalls, access controls (role-based).
- Employee training, regular audits, penetration testing.
- Breach response: notify Regulator/users within 72 hours if high risk (POPIA Section 22).
Third parties held to equivalent standards via contracts.
Data Retention and Destruction
Data retained only as necessary:
- Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and prescription requirements, thereafter, information is securely destroyed or archived.
- Active policies: duration + 5-7 years post-term (prescription period).
- Claims: 7 years post-settlement.
- Marketing: until opt-out + 3 months.
Secure deletion/shredding/archiving follows end of retention (POPIA accountability).
Your POPIA Rights
Exercise rights free (or reasonable fee):
- Access: request confirmation/records (Section 23).
- Correction/deletion: update inaccurate data (Section 24).
- Object: to processing/marketing (Section 11(3)).
- Withdraw consent: anytime, without affecting prior lawfulness.
- Portability: structured format (where feasible).
- Complain: to our Information Officer or Regulator.
Requests to privacy@firstafricalife.co.za; response within 30 days, identity verified.
Children’s Privacy
No processing of data from children under 18 without parental/guardian consent (POPIA Section 34). Term life applicants must be 18+.
Marketing
Direct marketing requires prior consent (POPIA Section 69); opt-in for emails/SMS.
Opt-out: “unsubscribe” links, DNC register, or contact us. No pre-ticked boxes.
Changes to This Notice
Updates posted on firstafricalife.co.za with version date; material changes emailed.
Last updated: February 10, 2026.
Contact Details
Information Officer: John Doe, compliance@firstafricalife.co.za, +27 75 942 0417.
Address: First Africa Life (Pty) Ltd, Rosebank Office Park, 181 Jan Smuts Avenue, Parktown North.
Information Regulator: complaints.IR@justice.gov.za, +27 60 592 9808, www.justice.gov.za/inforeg/.