Privacy Policy

1. Introduction

Mami Group is committed to protecting the privacy and personal information of our clients, prospective clients, website visitors and other individuals who interact with us.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you use our website, interact with our services, communicate with us, or receive communications from us through channels such as email and WhatsApp.

We process personal information in accordance with applicable South African data protection legislation, including the Protection of Personal Information Act, 4 of 2013 ("POPIA").

2. Information We May Collect

Depending on your relationship and interactions with us, we may collect and process information such as:

• Your name, surname and other identifying information;
• Contact information, including telephone numbers and email addresses;
• Information relating to policies, products or services you hold or enquire about;
• Policy and membership reference information;
• Payment and transaction-related information relevant to the administration of your policy or service;
• Communications and correspondence between you and Mami Group;
• Information submitted through our website or other service channels;
• Technical information generated when you interact with our digital services; and
• Other information reasonably required to provide, administer or support our services.

We only collect and process personal information where there is a lawful and legitimate basis for doing so.

3. How We Use Personal Information

Personal information may be used for purposes including:

• Providing and administering our products and services;
• Managing policies, memberships and client records;
• Responding to enquiries and service requests;
• Providing policy documents, payment information and other service-related communications;
• Verifying information and maintaining accurate records;
• Processing transactions and maintaining payment records;
• Communicating important information about products or services;
• Complying with legal, regulatory and contractual obligations;
• Preventing fraud, misuse and unauthorised access;
• Maintaining and improving our systems and services; and
• Supporting our legitimate business operations.

4. WhatsApp and Electronic Communications

Mami Group may communicate with clients and other authorised recipients using electronic communication channels, including email and WhatsApp.

Where WhatsApp is used, Mami Group may use the WhatsApp Business Platform and related services provided by Meta Platforms and its affiliates to send and receive communications.

These communications may include service-related information such as policy documents, payment summaries, policy notifications, client service messages and other information relating to products or services associated with you.

To facilitate WhatsApp communications, information such as your telephone number, message content, communication status and related technical information may be processed through the WhatsApp Business Platform.

Your use of WhatsApp is also subject to the applicable terms and privacy practices of WhatsApp and Meta.

5. MMG Platform

Mami Group uses internal technology systems, including the MMG Platform, to administer policies, manage client services, generate documents and facilitate authorised communications.

Access to these systems is restricted to authorised users and is subject to appropriate access controls, security measures and operational oversight.

Where the MMG Platform integrates with third-party communication services such as the WhatsApp Business Platform, only information reasonably required to provide the relevant communication or service is transmitted to those providers.

6. Sharing of Personal Information

We do not sell personal information.

We may disclose or make personal information available to third parties where reasonably necessary for legitimate business, contractual, service or legal purposes. These may include:

• Service providers that support our technology and business operations;
• Communication providers, including Meta and WhatsApp where WhatsApp communications are used;
• Insurers, underwriters and other parties involved in administering relevant products or services;
• Professional advisers and authorised service providers;
• Regulators, public authorities or law-enforcement bodies where required by law; and
• Other parties where disclosure is authorised or required by applicable law.

Where third parties process personal information on our behalf, we take reasonable steps to ensure that the information is handled appropriately and protected in accordance with applicable legal requirements.

7. Cross-Border Processing

Some technology and communication service providers used by Mami Group may process or store information outside South Africa.

Where personal information is transferred or processed across borders, we take reasonable steps to ensure that such processing complies with applicable data protection requirements.

8. Information Security

We maintain reasonable technical and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

These measures may include access controls, authentication, logging, infrastructure security, restricted system access and other safeguards appropriate to the nature of the information being processed.

Although we take reasonable precautions to protect personal information, no electronic transmission or information system can be guaranteed to be completely secure.

9. Retention of Personal Information

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, to provide and administer our services, to maintain appropriate business records, or to meet legal, regulatory and contractual obligations.

When personal information is no longer required, it will be securely deleted, destroyed or de-identified where appropriate and subject to applicable legal requirements.

10. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request confirmation of whether we hold personal information about you;
• Request access to your personal information;
• Request correction or updating of inaccurate or incomplete information;
• Request deletion or destruction of information where legally permitted;
• Object to certain processing of your personal information;
• Withdraw consent where processing is based on consent; and
• Raise a complaint regarding the processing of your personal information.

Certain information may need to be retained where required by law or where there is another lawful basis for retaining it.

11. Website Information

When you visit our website, certain technical information may be collected automatically by our website infrastructure or service providers. This may include information such as your browser type, device information, IP address and information about how the website is accessed.

This information may be used for security, operation, troubleshooting and improvement of our website and digital services.

12. Third-Party Services and Links

Our website and digital services may contain links to, or integrate with, services operated by third parties. Those third parties may have their own privacy policies and terms governing their services.

We encourage you to review the privacy information provided by those third parties when using their services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or privacy practices.

The latest version will be published on this website together with the date on which it was last updated.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how your personal information is processed, please contact Mami Group using the contact details published on our website.

Mami Group
40 Bok Street
Polokwane, 0700
South Africa

15. Information Regulator

You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe that your personal information has been processed in a manner that is inconsistent with applicable data protection legislation.