Privacy Policy

1. Operator role

GoFica (Pty) Ltd operates as an operator under POPIA Section 1. We process natural-person client due diligence records solely on the mandate and instructions of the responsible party (the accountable institution or firm that invited you). GoFica is not an accountable institution and does not outsource Section 21 statutory liability.

2. Information processed

When completing customer due diligence (CDD) requests, GoFica may collect and process:

• Identity details: Full names, South African identity number or passport number, and date of birth.
• Contact details: Mobile telephone number (used for one-time verification codes) and email address.
• Verification artefacts: Smart ID photos, proof of residential address documents, and declared source of funds details.
• Electronic receipts: Encrypted consent disclosures, verification timestamps, and compliance audit logs.

3. Informed consent and purpose specification

In compliance with POPIA principles of consent and data minimisation, your information is processed solely for the specific transaction or mandate you were invited to complete. Access leases are strictly time-bound. One-time verification codes prove phone possession and confirm consent for designated institutions.

4. Data subject rights

Under POPIA Sections 23 to 25, you have the right to request access to your personal information, request rectification of inaccurate records, or object to processing where applicable. Because GoFica acts as an operator, requests regarding transaction mandates may also be directed to the accountable institution managing your file.

5. Independent technology platform

GoFica is an independent compliance technology platform and is not affiliated with or endorsed by the Financial Intelligence Centre (FIC) or the Department of Home Affairs (DHA). This is not an official government portal.