Privacy Policy

Version 1 • Effective 2026-04-08

Effective date: 2026-04-09

Overview

This Privacy Policy explains how 1stop Funeral Policy PayCenter (“we”, “us”, “our”) collects, uses, shares, and protects personal information when you use our website and services (the “Service”).

This policy is provided for transparency and information purposes and does not constitute legal advice.

Personal data we collect

  • Account and identity data: name, surname, identity number (if provided), policy number, and company reference number.
  • Contact data: email address, phone number, and postal/physical address (where applicable).
  • Payment and transaction data: payment status, amounts, currency, and transaction references. We do not store full card details on our servers.
  • Usage and device data: pages viewed, features used, device identifiers, browser type, IP address, and diagnostic logs.
  • Cookies and similar technologies: necessary cookies and optional analytics cookies (where enabled).

How we collect data

  • Directly from you when you register, sign in, update your profile, submit forms, or contact us.
  • Automatically through cookies, local storage, server logs, and usage analytics.
  • From authorized third parties involved in servicing your policy (for example, payment processors and insurers) where permitted by law and contract.

How we use personal data

  • Provide and operate the Service, including policy administration, member support, and payment processing.
  • Send important service communications (for example, password resets, payment confirmations, policy reminders).
  • Prevent fraud, secure accounts, troubleshoot issues, and improve reliability.
  • Comply with legal obligations, financial recordkeeping, and regulatory requirements.

Legal bases for processing (GDPR)

If you are in the European Economic Area/UK, we process personal data under one or more of the following legal bases:

  • Contract: to provide the Service and administer your policy.
  • Legal obligation: to meet regulatory, accounting, and recordkeeping obligations.
  • Legitimate interests: to secure the Service, prevent abuse, and improve functionality.
  • Consent: for optional features such as certain marketing or analytics, where applicable. You can withdraw consent at any time.

Data retention

We keep personal data only for as long as necessary for the purposes described in this policy. Retention periods depend on the type of data and legal requirements.

  • Account data: while your account is active and for a limited period afterward for dispute handling and security.
  • Policy and payment records: retained for the period required by applicable laws and financial regulations (often multiple years).
  • Logs and security records: retained for a limited period, then deleted or anonymized.

Sharing and disclosure

We may share personal data with trusted service providers and partners only as necessary to provide the Service, such as:

  • Insurance companies and administrators associated with your policy.
  • Payment processing providers and banking partners (for transaction processing and reconciliation).
  • Email and push notification providers (for service messages).
  • Hosting, monitoring, and security providers.

We do not sell personal information. If you are a California resident, see “Your rights (CCPA/CPRA)” below.

Cookies

Cookies are small text files stored on your device. We use cookies for essential site functionality and, where enabled, to understand usage and improve the Service.

You can control cookies through your browser settings and can delete existing cookies at any time. Disabling some cookies may affect functionality.

Security

We use administrative, technical, and physical safeguards designed to protect personal data, including access controls, encryption in transit (HTTPS), and monitoring. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

International transfers

Your data may be processed in countries other than your own depending on where our service providers operate. Where required, we use appropriate safeguards for international transfers.

Your rights

Depending on your location, you may have rights regarding your personal data:

  • Access to your data.
  • Rectification (correction) of inaccurate data.
  • Deletion (in certain cases).
  • Restriction or objection to processing (in certain cases).
  • Portability (where applicable).
  • Withdraw consent where processing is based on consent.

Your rights (CCPA/CPRA)

If you are a California resident, you may have the right to know what personal information is collected, used, disclosed, and the right to request deletion, subject to exceptions. We do not sell personal information.

Children’s privacy

The Service is not intended for children under 13 (or the age defined by local law). We do not knowingly collect personal data from children.

Contact

For privacy and data protection inquiries, contact:

Email: privacy@1stoppolicy.co.za
Address: Available on request

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the effective date.