Privacy notice

Who we are

Olvian (Pty) Ltd, registration 2024/631125/07, Registered address to be confirmed, Johannesburg, South Africa, is the responsible party for the information you give us on olvian.com and on WhatsApp. Our Information Officer is the founder, privacy@olvian.com, registered with the Information Regulator.

What we collect

Your name, mobile number, email (if given), ID number (if given), date of birth, province and town, work situation, whether you can pay by debit order, the answers to the product questions, the time you prefer to be called, your language, and the consents you gave. From your device, the IP address, browser type, the page you arrived from and the time. From WhatsApp, the messages between you and us. If you answered a health question and consented, that answer.

What we keep on your device

To save you typing the same thing twice, your browser keeps two things for 30 days, on your device only: a draft of a quote form you have not finished (your answers and the step you reached), and the details you gave on a form you did finish (your name, contact details, province, date of birth, work situation and preferences), so the next form starts with them. Nothing in this store is sent to us or to anyone else until you press the send button, it is not linked to any identifier that leaves your device, and "Not you? Start fresh" on any form deletes all of it. We do not use your IP address to guess your province or anything else about you.

Why we collect it

To pass your request to the licensed insurers you agreed to, so they can contact you about the cover you asked for. To confirm your identity and reachability before we do that. To keep proof of your consent, as the law requires us to. To honour opt-outs. To measure which of our adverts produced requests that were real. Nothing else.

Who receives it

The insurers and brokers named on your consent screen, and only them. Once they receive your request they are responsible for it under their own licence and their own privacy notice, and they may use it only for the cover you asked about.

Companies that process it on our behalf under written agreements: Google Cloud (hosting, in South Africa), Meta (WhatsApp messages), our SMS provider, our email provider, and Anthropic (the AI service that reads your free-text WhatsApp replies to understand them).

Where it is kept

Our systems and backups are in Google Cloud's Johannesburg region. We do not copy your data to other countries, with one exception described next.

The AI service, and what crosses the border

When you reply to us on WhatsApp in your own words, the text of that reply and the question it answers are sent to Anthropic's service in the United States so that software can work out what you meant, for example that "after five" means an evening call. We do not send your name, ID number, phone number or email with it. The service does not keep the text to train on. If you would rather not have this happen, leave the WhatsApp box unticked and the insurer will call you directly.

How long we keep it

• A request that did not reach an insurer: identifying details removed after 90 days; deleted after one year.
• A request that reached an insurer: identifying details removed after one year; the anonymous record kept for reporting.
• Your consent record and any opt-out: kept as long as needed to prove them, and opt-outs are kept permanently so we never approach you again.
• A form you started but did not send: deleted after 24 hours.

Automated decisions

Software gives each request a score from checks such as whether the mobile number is live and whether you confirmed on WhatsApp. The score decides which insurer receives your request first. It does not decide whether you receive a service. You can ask a person to review any decision by emailing the Information Officer.

Your rights

You can ask what we hold about you, ask us to correct it, ask us to delete it (subject to what we must keep to prove consent and opt-outs), object to how we use it, withdraw consent at any time, and ask us where we got your details. The answer to the last one is always the same: from you, on our form, on the date shown on your record. To use any right, email privacy@olvian.com with your reference number or mobile number. We respond within 30 days, usually much sooner. You can complain to the Information Regulator: complaints.IR@justice.gov.za, 010 023 5200.

Security

Your details are encrypted in transit and at rest. Access inside Olvian is limited to the people who need it, and every access is logged. Insurers receive your details over encrypted connections. If a breach ever affects you, we tell you and the Regulator.

Changes

If we change this notice we update the date at the top and, for material changes, tell you the next time we contact you.