Privacy Policy

Last updated: March 2025

1. Introduction

BankLink is committed to protecting your personal information. This policy explains how we collect, use, and protect data when you use our services. We comply with the Protection of Personal Information Act 2013 (POPIA).

2. Information we collect

  • ·Account information (name, email, organisation details) when you register
  • ·Financial account data that you authorise us to access on your behalf
  • ·Usage data (API calls, access logs) for security and billing
  • ·Device and browser information for security monitoring

3. How we use your information

  • ·To provide and improve the services
  • ·To process API requests you authorise
  • ·For billing and account management
  • ·To communicate service updates and important notices
  • ·To detect and prevent fraud and security incidents

4. Data sharing

We do not sell your personal information. We may share data with:

  • ·Service providers who assist in delivering the services (under strict confidentiality obligations)
  • ·Regulators or law enforcement where required by law
  • ·Third parties where you have explicitly consented

5. Financial data

We access your financial account data only with your explicit consent. You may withdraw consent and disconnect accounts at any time. We retain financial data only as long as necessary to provide the services.

6. Security

BankLink is independently certified as compliant with ISO 27001:2022. All data is encrypted in transit and at rest. Access to your data is logged and audited.

7. Your rights

Under POPIA, you have the right to:

  • ·Access the personal information we hold about you
  • ·Correct inaccurate information
  • ·Request deletion of your data
  • ·Withdraw consent for data processing
  • ·Lodge a complaint with the Information Regulator

8. Data retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion at any time.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

10. Contact

For privacy enquiries, contact us at: privacy@banklink.co.za

11. Changes to this policy

We will notify you of material changes to this Privacy Policy with 30 days notice.