Privacy Notice
Version 1, September 16, 2026
1. INTRODUCTION
At ADSKI OÜ, we value your privacy and are committed to protecting and handling your personal information responsibly and in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").
This Privacy Notice sets out our core principles and terms regarding the processing of personal information, as well as the measures we have taken to keep personal information secure.
This Privacy Notice applies to our website finmart.co.za and applications under the Finmart brand in South Africa, as well as marketing communications related to the promotion of our services.
2. CONTACT INFORMATION OF THE RESPONSIBLE PARTY
ADSKI OÜ (hereinafter referred to as "ADSKI" or "We") is the responsible party for the personal information we collect, unless otherwise stated.
You can contact us in several ways, including by email and postal mail.
Our postal address:
Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 52/1-166, 10115, Estonia
Registration number: 16177539
Information Officer: compliance@finmart.co.za
3. WHAT INFORMATION WE PROCESS, FOR WHAT PURPOSES, ON WHAT BASIS, AND FOR HOW LONG
We act as the responsible party for your personal information. This means we independently determine the purposes of processing and select the tools and services used for processing.
| Data Subject | Purpose | Personal Information Used | Source | Lawful Basis (POPIA section 11) |
|---|---|---|---|---|
| Customer | Account registration and sign-in | Name, email, account credentials, authentication metadata | Directly from you and third-party identity providers (where used) | Conclusion or performance of a contract |
| Customer | Comparison and favourites features | Saved offers, comparison selections, basic account data | Generated when you use the website/application | Conclusion or performance of a contract |
| Customer / User | Preliminary loan application and matching with credit providers | Identity and contact details, requested loan amount and term, employment and income-related fields, application fields submitted through forms | Directly from you; selected credit providers for application feedback statuses | Consent / conclusion or performance of a contract |
| Customer | Service notifications | Email, phone number, service status communications | Directly from you | Legitimate interest |
| Customer | Customer support and complaints handling | Name, email, phone, request content, communication history | Directly from you | Conclusion or performance of a contract / legal obligation |
| Customer / User | Service analytics and product improvement | IP address, device/browser data, event logs, cookie identifiers | Generated via website/app interactions and analytics tools | Legitimate interest / consent (for non-essential cookies) |
| Customer / User | Direct marketing communications | Email, phone, push token, communication preferences | Directly from you and your consent settings | Consent (POPIA section 69) |
| Customer / User | Fraud prevention and security | IP address, device data, suspicious activity signals | Generated through security monitoring tools | Legitimate interest |
If you do not provide personal information required to perform contractual services, we may be unable to provide relevant features of the service under our Terms of Use.
We do not intentionally collect special personal information (such as health, religious or biometric information) or personal information of children under the age of 18.
4. RETENTION PERIODS
We retain your personal information only for as long as necessary to achieve the purpose for which it was collected, unless a longer retention period is required or authorised by law or is necessary to establish, exercise or defend legal claims. Once the purpose has been achieved, we delete, destroy or de-identify the personal information.
5. AUTOMATED DECISION-MAKING
We do not make decisions based solely on the automated processing of personal information that result in legal consequences for you or affect you to a substantial degree. Decisions on loan applications are made solely by the credit providers.
6. WHO WE SHARE YOUR PERSONAL INFORMATION WITH
We may share personal information with third parties strictly when necessary to provide services, operate the platform, comply with law, or protect our legitimate interests. Operators that process personal information on our behalf are bound by written agreements requiring them to keep the information confidential and secure.
Main categories of recipients include:
- Hosting and infrastructure providers.
- Email, SMS, and push communication providers.
- Analytics and product performance providers.
- Security and fraud-prevention providers.
- Credit providers registered with the National Credit Regulator and other financial partners, where this is required to process your preliminary loan application.
7. CROSS-BORDER TRANSFERS
Some of our service providers are located outside the Republic of South Africa. Where personal information is transferred to a foreign country, we only do so in accordance with section 72 of POPIA, for example where the recipient is subject to laws, binding corporate rules or contractual commitments that provide an adequate level of protection, or where you have consented to the transfer.
8. SECURITY OF YOUR PERSONAL INFORMATION
We implement appropriate, reasonable technical and organisational measures to prevent the loss of, damage to, unauthorised destruction of, and unlawful access to or processing of personal information, including SSL encryption, access controls and regular security reviews. If we have reasonable grounds to believe that your personal information has been accessed by an unauthorised person, we will notify you and the Information Regulator as required by section 22 of POPIA.
9. YOUR RIGHTS
Subject to POPIA, you have the right to:
- Be notified that your personal information is being collected.
- Request access to the personal information we hold about you.
- Request the correction, destruction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully.
- Object, on reasonable grounds, to the processing of your personal information.
- Object at any time to the processing of your personal information for direct marketing.
- Withdraw your consent at any time, where processing is based on consent.
- Lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).
If you want to exercise your rights, contact our Information Officer at compliance@finmart.co.za. We will respond as soon as reasonably possible and, in any case, within the timeframe required by law.
10. DIRECT MARKETING
We only send you direct marketing by electronic communication if you have given your consent. You can opt out of marketing messages at any time by using the unsubscribe link in our communications, by visiting this page, or by contacting us at compliance@finmart.co.za.
11. CHANGES TO THIS PRIVACY NOTICE
We may update this Privacy Notice from time to time. If we make material changes, we may notify you through available channels such as email, push notification, or SMS before such changes take effect.