Will Referral Programme privacy notice

Who is responsible

Know Your Number SA operates this enquiry and referral process. Privacy requests may be submitted through the Privacy choices page or by email to simbanyats@gmail.com.

What we collect

Full names, cellphone number, email address, Gauteng location, suburb, self-selected life-stage trigger and will status, individual or household-case selection, confirmation that the current R900,000 household-asset threshold is met, preferred contact channel and time, recruiter attribution, consent evidence, source and operational case status.

We do not request identity numbers, exact asset values or balances, health details, beneficiary or children's details, will contents or suitability information here. We do not infer or score a person's LSM.

Why we use it

To respond to the current enquiry, record your choices, prevent unwanted contact, prepare an approved referral only when separately permitted, secure the service and produce aggregate operations reports. This service does not provide automated legal or financial advice or promise an outcome.

Sharing

If and only if you separately agree, the minimum referral information and consent evidence may be shared with Sanlam Legacy through Simba Nyatsambo at simba.nyatsambo@sanlam4u.co.za. Recruiters receive attribution links and aggregate performance or payment information, not prospect databases or another recruiter's lead details. Service operators process data only to run and secure the platform.

Research-source contacts

Information from another research project may not be reused merely because it already exists. Any new approach requires a lawful and documented basis, compatibility with the original notice and purpose, a suppression check, and the person's explicit agreement to receive the programme link. Recruiters must not upload research databases or submit the client form on another person's behalf.

Retention, location and safeguards

Records are retained only for the approved operational, complaint-handling and legal record-keeping periods, then deleted or de-identified where permitted. Managed cloud providers may process information in more than one country under their contractual and security safeguards. The system uses access controls, platform encryption, prepared database statements, minimum-data design and append-only consent history.

Your rights and choices

You may withdraw a permission, stop contact, request access or correction, object to processing or ask about deletion. Some minimum evidence may be retained where law requires it.

Cookies and analytics

Advertising pixels, cross-site tracking and behavioural profiling are disabled. Any later analytics configuration requires approval.