Privacy Policy

Introduction

This Privacy Policy describes how Verify Now (the "Site," "we," "us," or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from verifynow.co.za (the "Site") or otherwise communicate with us (collectively, the "Services").

Urban Luxury Brands (Pty) Ltd (Reg. 2007/013732/07) is the parent company trading as Verify Now.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

2. How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

3. What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services.

Information We Collect Directly from You

• Basic contact details including your name, address, phone number, email
• Order information including billing address, payment confirmation, email address
• Account information including your username and password
• Verification information including ID documents, facial images for identity verification
• Customer support information from your communications with us

Information We Collect through Cookies

We automatically collect certain information about your interaction with the Services ("Usage Data"). This includes information about how you access and use our Site and your account, including device information, browser information, your IP address, and other interaction data.

Information We Obtain from Third Parties

• Companies who support our Site and Services
• Our payment processors, who collect payment information to process your transactions
• Third-party verification services for identity and document verification

4. How We Use Your Personal Information

4A. Controller and Processor Roles

For the purpose of data protection laws, different parties have different roles:

5. Cookies

Like many websites, we use Cookies on our Site. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services. We may also permit third parties and service providers to use Cookies on our Site.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services to work incorrectly or no longer be available.

6. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy:

• With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage)
• With business and marketing partners to provide services, with your consent
• When you direct, request us, or otherwise consent to our disclosure
• With our affiliates or otherwise within our corporate group
• In connection with a business transaction or to comply with legal obligations

We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.

6A. Verification Sources

To provide identity verification services, we access authoritative data sources under lawful authority. These are not third parties who receive your data, but rather official sources we query to verify the information you provide.

Access to these sources is governed by applicable South African legislation and our lawful authority to access such information for verification purposes.

6B. Infrastructure Sub-processors

We engage third-party service providers to support our infrastructure and operations. These sub-processors provide services such as cloud hosting, databases, monitoring, email/SMS delivery, and support tooling.

All sub-processors are bound by data protection agreements and are required to implement appropriate security measures.

For more information about our sub-processors, please see our Sub-processors page.

6C. International Customers

For customers located outside South Africa, including the European Economic Area (EEA), United Kingdom, and other jurisdictions with applicable data protection laws, we process personal information in accordance with principles that are equivalent to or exceed those required under such laws.

If you have specific compliance requirements under EU GDPR, UK GDPR, or other international data protection laws, please contact us at privacy@verifynow.co.za to discuss your needs.

7. Third Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

8. Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

9. Security and Retention of Your Information

We implement enterprise-grade security measures to protect your personal information, including AES-256 encryption at rest and TLS 1.3 encryption in transit (with TLS 1.2+ supported where required for compatibility). For more details, please see our Information Security Policy.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

9A. Retention Schedule (Default)

We retain different types of personal information for different periods based on legal requirements and operational needs:

9B. Breach Notification

In the unlikely event of a security incident affecting your personal information, we are committed to transparent and timely communication in accordance with POPIA requirements.

10. Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information:

You may exercise any of these rights by contacting us using the contact details provided below. We will not discriminate against you for exercising any of these rights.

11. Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live, you may have the right to lodge your complaint with your local data protection authority (in South Africa, this is the Information Regulator).

12. International Users

Please note that we may transfer, store, and process your personal information outside the country you live in. Your personal information is also processed by staff and third party service providers and partners in these countries. If we transfer your personal information out of South Africa or Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses and comply with POPIA's cross-border transfer requirements.

13. Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:

14. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our practices or regulatory requirements.

Version: 2.0
Last Updated: December 26th, 2025