POPIA Compliance
Effective date: 18 June 2026 · Operated by Pipeline IQ (Pty) Ltd
Protection of Personal Information Act 4 of 2013
1. Overview
The Protection of Personal Information Act 4 of 2013 (POPIA) is South Africa's primary data protection legislation. It regulates how organisations collect, store, use, and share personal information about individuals.
Pipeline IQ (Pty) Ltd, trading as Cover Now, is committed to full compliance with POPIA. This notice explains how we meet our obligations under the Act and what your rights are as a data subject.
2. Responsible Party & Information Officer
The responsible party under POPIA is:
Pipeline IQ (Pty) Ltd Trading as: Cover Now Address: 3 Fountain Lane, Canal Edge 4, Tyger Waterfront, Cape Town Website: cover-now.co.za Information Officer Email: [email protected]
Our Information Officer is responsible for: • Ensuring compliance with POPIA across all processing activities • Handling data subject access and correction requests • Managing data breach notifications • Liaising with the Information Regulator
3. Lawful Basis for Processing
We process personal information on the following lawful bases under POPIA:
• Consent: You provide explicit consent when submitting a quote request. You may withdraw consent at any time. • Legitimate interest: We process certain data (such as server logs) for the legitimate interest of maintaining platform security and performance, where this does not override your rights. • Legal obligation: We retain certain records as required by applicable South African law.
We do not process special personal information (such as health data, race, or biometric data) unless you voluntarily provide it and we have your explicit consent.
4. Eight Conditions for Lawful Processing
POPIA sets out eight conditions that must be met for personal information to be processed lawfully. Cover Now complies with all eight conditions as described below.
Accountability
Pipeline IQ (Pty) Ltd is the responsible party for all personal information processed through the Cover Now platform. We have appointed an Information Officer responsible for ensuring compliance with POPIA across our operations.
Processing Limitation
We collect only the personal information that is necessary for the specific purpose of connecting you with a suitable FSP or credit provider. We do not collect excessive or irrelevant information.
Purpose Specification
Personal information is collected for a specific, explicitly defined purpose — lead generation and FSP matching. We do not use your information for any purpose incompatible with this without your prior consent.
Further Processing Limitation
We do not further process your personal information in a manner that is incompatible with the purpose for which it was originally collected. Any secondary use requires fresh consent.
Information Quality
We take reasonable steps to ensure that the personal information we hold is accurate, complete, and up to date. You are encouraged to notify us of any changes to your information.
Openness
We are transparent about how we collect and use personal information. This POPIA Compliance Notice, our Privacy Policy, and our Terms of Service are publicly available on our website.
Security Safeguards
We implement appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access, or unlawful processing. All data is transmitted over encrypted connections.
Data Subject Participation
You have the right to access, correct, and request deletion of your personal information. You may also object to processing for direct marketing purposes. Contact our Information Officer to exercise these rights.
5. Your Rights as a Data Subject
Under POPIA, you have the following rights regarding your personal information.
Right to Access
Request a copy of the personal information we hold about you at any time.
Right to Correction
Request that we correct or update inaccurate or incomplete personal information.
Right to Object
Object to the processing of your personal information, including for direct marketing.
Right to Deletion
Request deletion of your personal information, subject to legal retention obligations.
Right to Complain
Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated.
Right to Withdraw Consent
Withdraw any consent you have given at any time without affecting prior lawful processing.
6. How to Exercise Your Rights
To exercise any of your rights under POPIA, please contact our Information Officer:
Email: [email protected] Subject line: "POPIA Data Subject Request"
Please include: • Your full name and contact details • A description of your request (access, correction, deletion, objection, etc.) • Proof of identity (a copy of your South African ID or passport)
We will acknowledge your request within 3 business days and respond fully within 30 days. If we are unable to fulfil your request, we will explain why in writing.
7. Third-Party Operators
Where we share your personal information with third parties (FSPs, credit providers, or service providers), we ensure that:
• Sharing occurs only with your explicit consent (for FSPs and credit providers) • Third-party service providers are bound by data processing agreements that require POPIA-compliant handling • We do not authorise third parties to process your information for their own purposes beyond what is necessary
Once your information is shared with an FSP, that FSP becomes an independent responsible party for your data. You should refer to their privacy policy for information on how they handle your data.
8. Data Breach Notification
In the event of a data breach that is likely to affect your rights and interests, we will:
• Notify the Information Regulator as soon as reasonably possible • Notify you directly if the breach poses a risk to your rights • Take immediate steps to contain and remediate the breach
Notifications will be sent to the email address you provided when submitting your quote request.
9. Information Regulator
If you are not satisfied with how we have handled your personal information or your POPIA request, you have the right to lodge a complaint with the Information Regulator of South Africa:
Website: www.inforegulator.org.za Email: [email protected] POPIA Complaints: [email protected] Telephone: 010 023 5207
10. Updates to This Notice
We review and update this POPIA Compliance Notice periodically to reflect changes in our practices or applicable law. The effective date at the top of this page indicates when it was last updated. We encourage you to review this notice regularly.