6 | P a g e
Rynat Capital (Pty) Ltd is an authorised financial service provider in South Africa with registration number 2004/005384/07 and licensed by the Financial Sector Conduct Authority
(FSCA) under the FSP license number 23497.
Safeguard Measures
The Company takes reasonable precautions to protect Personal Information from loss, theft, misuse,
unauthorized access or disclosure, alteration, or destruction. We employ physical, electronic, and
procedural safeguards to protect Personal Information and it does not store Personal Information for
longer than necessary to provide the Service or as permitted by legislation.
In accordance with the recommendations of Payment Card Industry Security Standards Council, customer
card details are protected using Transport Layer encryption — TLS 1.2 and application layer with
algorithm AES and key length 256 bit. We do not store or collect any Credit Card data. All credit card
information is stored on the payment provider side. All payments made between us and you, and vis a vis,
via the company’s merchant accounts and/or third-party payment processing service providers, the Client
will receive unique billing descriptor on their card statement from the bank, confirming the payment and
which may include, but not limited to, the description "Rynat Capital (Pty) Ltd, branded website and
customer support service telephone number.
The Company’s datacenter(s) contain both internal and external servers. Access to the Company’s
internal server is restricted to pre-approved persons, servers and locations; our external servers can be
accessed via the Internet. Your Information is stored and encrypted on secure servers and our servers can
only ever be accessed by authorized personnel. While we will use all reasonable efforts to safeguard Your
Information, you acknowledge that the use of the internet is not entirely secure and for this reason we
cannot guarantee the security or integrity of any personal data transferred from you, or to you via the
internet.
Duration of keeping Your Information
You may request from us to erase/delete your personal data in cases where there is no rationale as to the
need for us to continue to process it. However, we may not be able to comply with your request due to
regulatory requirements by which you will be notified accordingly.
We will not keep Your Information for any longer than is required for legal and/or business purposes. In
many cases, information must be kept for considerable periods of time, subject to a maximum of five (5)
years. Retention periods will be determined considering the type of information that is collected and the
purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need
to destroy outdated, unused information at the earliest reasonable time.