J-Cred Consent

Definitions. “Data Subject” means the individual or juristic person whose information is checked, represented where applicable by an authorised signatory. “Company” means the organisation requesting the checks. “KTO” means KTO Digital (Pty) Ltd (Reg. 2016/544228/07; NCRCB61), which performs the selected checks through its J-Cred platform and lawful information sources/service providers. “Personal Information” includes information defined in POPIA, consumer credit information under the NCA, and special personal information such as criminal or biometric information.

1. Authority and purpose. I confirm that the selected checks are required for the lawful purpose stated. I consent to KTO collecting, receiving, matching, verifying, using, recording, storing and disclosing to the Company the minimum information reasonably required to perform those checks. I authorise lawful sources – including government departments, credit bureaux, banks/account-verification services, courts and public records, educational/professional bodies, employers/referees and authorised service providers – to release relevant information to KTO.

2. Special checks. Where selected, I expressly consent to lawful processing of criminal and biometric information and to KTO contacting institutions, employers and referees. Social-media screening is limited to lawfully accessible information relevant to the stated purpose; KTO will not require passwords or access private accounts. Psychometric assessments must be job-relevant and used only where valid, reliable, fair and not biased.3. Credit and listing controls. Credit checks may be performed only for a purpose permitted by the NCA. For employment, the Company certifies that the position requires honesty in dealing with cash or finances and that the job description supports the enquiry. My signature does not itself authorise an immediate default listing: any Default Listing request remains subject to applicable NCA notice, accuracy and dispute requirements.

4. Voluntary supply, security and retention. Information is supplied voluntarily unless required by law or a lawful process. Failure to provide required information may prevent completion of the checks or the relevant application/transaction. KTO will apply reasonable security safeguards, retain records only for as long as lawfully necessary, and transfer information outside South Africa only with POPIA-compliant safeguards.

5. Rights and decision-making. I may request access to, correction/deletion of, or restriction of my information; object where permitted; withdraw consent prospectively; dispute consumer credit information; and complain to KTO, the Information Regulator or the NCR. Withdrawal does not affect processing already lawfully completed or processing based on another legal ground. The Company must give me a reasonable opportunity to comment on materially adverse information before making a decision and must not rely solely on automated processing where prohibited.

6. Accuracy and Company declaration. I confirm that information I provide is accurate and, for business checks, that I am authorised to act for the business. The Company certifies that the request is lawful, necessary and proportionate; will use results only for the stated purpose; will restrict access to authorised persons; and will comply with POPIA, the NCA, employment law and other applicable law.Source-data limitation and indemnity. To the extent permitted by law, KTO is not responsible for inaccuracies originating in independent source records where KTO has taken reasonable steps to obtain and transmit them accurately. The Company indemnifies KTO against claims arising from the Company’s unlawful request, misuse/disclosure of results or decision-making, except to the extent caused by KTO’s unlawful processing, breach of statutory duty, gross negligence or wilful misconduct. Nothing in this form waives any non-waivable right under POPIA, the NCA, the CPA or other law.

* Default Listing is not a background check and requires a separate compliant listing process. Full privacy notice: www.j-cred.co.za/privacy-policy    |   www.kto.co.za/privacy-policy


KTO Digital Information Officer: legal@kto.co.za | POPIA complaints: POPIAComplaints@inforegulator.org.za | NCR complaints: complaints@ncr.org.za