1. Who we are
Momentum Multiply (Pty) Ltd, part of Momentum Metropolitan Holdings (MMH), is a rewards programme that guides, motivates and encourages its members to become holistically well by taking everyday steps to live healthier. We do this by giving members access to various wellness and leisure facilities and services. Multiply also offers members discounts and cashbacks at various providers and services to incentivise and reward wellness behaviours.
2. The purpose of the notice
We respect your privacy and your personal information, and for this reason we will take all reasonable measures, in accordance with this Policy, to protect your personal information to keep it confidential, even when you are no longer a member.
We will maintain the confidentiality of your personal information and comply with the Protection of Personal Information, Act 4 of 2013 (POPIA) when processing your personal information.
Multiply provides, amongst others, the following products and services:
Multiply rewards programme; and
Multiply Money savings and payment wallets
We briefly outline the principles below:
We will only collect, disclose, collate, process and store (use) your personal information with your express consent, unless we are legally required to do so, and will only use such information for the lawful purpose for which it is required.
We will disclose, in writing, the specific purpose for which we use, request and store your personal information. We will also keep a record of that personal information and the specific purpose for which we collect it.
3. Information disclosure
3.1 What is personal information?
Personal information refers to any information that identifies you or specifically relates to you. Personal information includes, but is not limited to, the following information about you:
Your marital status (like married, single, divorced), your national origin, your age, your language, birth, education;
Your financial information, which may include your financial history (like your income or your buying, investing and banking behaviour based on, amongst others, account transactions);
Your identifying number (like an account number, identity number or passport number);
Your email address, location information, physical address (like residential address, work address or your physical location), and telephone number (including your cellular number, home landline or office work number);
Your online identifiers such as social media profiles;
Your biometric information (like fingerprints, signature or voice);
Your race and gender;
Your physical health, mental health, wellbeing, disability, religion, belief, conscience, culture.
- Your medical history (like your HIV/AIDS status and any medical history disclosed or obtained), criminal history, employment history;
- Your personal views, preferences and opinions;
- Your confidential correspondence; and
- Another’s views or opinions about you and your name also constitute your personal information.
3.2 What is special personal information
Special personal information is personal information about the following:
Your religious and your philosophical beliefs (for example where you enter a competition, and you are requested to express your philosophical view);
Your race (for example where you apply for a product or service where the statistical information must be recorded);
Your ethnic origin;
Your trade union membership;
Your political beliefs;
- Your health (for example where you apply for an insurance policy or medical- or health-related products);
- Your biometric information (for example to verify your identity); and
- Your criminal behaviour and alleged commission of an offence (for example to prevent money laundering as required by law or when you apply for employment or enter into a relationship with us).
3.3 What type of personal information does Multiply collect?
Personal information collected by Multiply can include, but is not limited to, a data subject’s name, contact, birth date, identity number, gender, employment details, marital, family, policy, bank account, wearable device information, medical and health information.
When personal information is collected, Multiply will indicate the purpose for the collection and whether the information required is compulsory or voluntary.
3.4 How does Multiply collect personal information?
The company collects information either directly from the data subject, the employer or through financial services intermediaries. In certain instances, Multiply may collect information from third parties and partners on its behalf across all channels. The source from which personal information was obtained, if not directly from the data subject, will be disclosed.
3.5 When will we process your personal information?
We will only process your personal information for lawful purposes related to our business if the following circumstances apply:
You have consented thereto;
- A person legally authorised by you, the law or a court, has consented thereto;
- It is necessary to conclude or perform under a contract we have with you;
- The law requires or permits it;
- It is required to protect or pursue your legitimate interest, ours or that of a third party; and
- You are a child, and a competent person (such as a parent or guardian) has consented thereto on your behalf.
3.6 When will we process your special personal information?
We may process your special personal information under the following circumstances:
- If you have consented to the processing thereof;
- If the processing is needed to create, use or protect a right or obligation in law;
- If the processing is for statistical or research purposes;
- If the special personal information was made public by you;
- If the processing is required by law; and
- If racial information is processed and the processing is required to identify you.
3.7 Reasons for processing your personal information
We will process your personal information for any of the following reasons:
Location information for the purposes of recording Safe Dayz journeys and for Safety Alert emergency callouts where the features have to voluntarily be activated as part of the products signed up for with Momentum Metropolitan;
To process payment instruments (such as a cheque) and payment instructions (such as a debit order or a stop order deduction);
To create, manufacture and print payment instruments (such as a cheque) and payment devices (such as a debit card);
To open, manage and maintain your accounts or membership, contracts, agreements or relationship with us;
To enable us to deliver goods, documents or notices to you;
For security and identity verification, and to check the accuracy of your personal information.
To communicate with you and carry out your instructions and requests;
For customer satisfaction surveys, promotional and other competitions;
- To enable you to participate in the rewards programme: determine your qualification for participation, rewards points, rewards level, and monitor your buying behaviour with our rewards partners to allocate the correct points or inform you of appropriate products, goods and services you may be interested in, or to inform our reward partners about your purchasing behaviour;
- To enable you to save earned cashbacks and money deposited into your wallet as well as to earn interest on your funds;
- To process payments from your wallets;
- To enable you to participate in and make use of value-added products and services; or
- For any other related purposes.
3.8 Processing the information of a child
Momentum Metropolitan takes the privacy of children very seriously. Children under the age of 18 years should obtain their guardian’s consent before providing or submitting any personal information about themselves on the MMH website.
We will not require children under this age to provide any personal information other than that which is reasonably necessary to use the MMH website.
If we determine that a user is under the age of 18, we will not use or maintain his or her personal information without the guardian’s consent.
A child is a person who is defined as a child by a country’s legislation, and who has not been recognised as an adult by the courts. We process the personal information of children if the law permits this. We will only process the personal information of children if any one or more of the following applies:
A person with the ability to sign legal agreements has consented to the processing, as the parent or guardian of the child;
The child’s personal information was made public by the child, with the consent of a person who can sign legal agreements;
- The processing is for statistical or research purposes and all legal conditions are met;
- Where the child is an heir in a will, if required to give effect to the will;
- Where the child is a beneficiary of a trust, if required to give effect to the trust deed;
- Where the child is legally old enough to open a bank account without assistance from their parent or guardian; or
Where the child is legally old enough to sign a document as a witness without assistance from their parent or guardian.
3.9 Obtaining personal information about members
We collect information about you in the following ways:
Directly from you;
- Based on your use of our products, services, or service channels (such as our websites and applications);
- Based on how you engage or interact with us, such as on social media, and through emails, letters, telephone calls, and surveys;
- From public sources (such as newspapers); and
- From third parties for the purposes of conducting our business (such as partners, reward partners, list providers, our rewards programme’s retail and online partners, or our service providers).
If the law requires us to do so, we will ask for your consent before collecting personal information about you from third parties. The third parties from whom we may collect your personal information include, but are not limited to, the following:
- Your spouse, dependants, partners, employer, joint applicant or account holder and other similar sources;
- People you have authorised to share your personal information with, such as a person that makes a travel booking on your behalf, or a medical practitioner for insurance purposes;
- Attorneys, tracing agents, debt collectors and other persons that assist with the enforcement of agreements;
- Payment processing service providers, merchants, banks and other persons that assist with the processing of your payment instructions;
- Insurers, brokers, other financial institutions or other organisations;
- Law enforcement and fraud prevention agencies, and other persons tasked with the prevention and prosecution of crime;
- Regulatory authorities, industry ombudsmen, government departments, and local and international tax authorities;
- Credit bureaux;
- Trustees, executors or curators appointed by a court of law;
- Cheque verification service providers;
- Our service providers, agents and sub-contractors such as couriers and other persons we use to offer and provide products and services to you;
- Courts of law or tribunals;
- Participating partners, whether retail or online, in our customer loyalty reward programmes.
- Suppliers in the delivery of our wallet and payment services;
- Our joint venture partners;
- Marketing list providers; and
- Digital data transformation or aggregation services which you have authorised to collect activity, health or other digital data streams and share with us.
3.10 Processing information about persons related to a juristic person
If you are a juristic person, such as a company or close corporation, we may collect and use personal information related to the juristic person’s directors, officers, employees, beneficial owners, partners, shareholders, members, authorised signatories, representatives, agents, payers, payees, customers, guarantors, spouses of guarantors, sureties, spouses of sureties, other security providers and other persons related to the juristic person.
If you provide the personal information of a related person to us, you warrant that the related person is aware that you are sharing their personal information with us, and that the related person has consented thereto.
3.11 Direct marketing
- If you consent, Multiply may use your personal or other information to tell you about products, services and special offers from the company or other subsidiaries of Momentum Metropolitan.
- We will use your personal information to market Multiply and Multiply Money related products and services to you.
- We will do this in person, by post, by telephone, or electronic channels such as SMS, email and other digital channels.
- In all cases, you can tell us to stop sending marketing communications to you at any time.
4. Use of location services
We use location services for specific products and services through our websites and applications. The location services will only be switched on with the prior consent of the user. The use of location services is set out in the purpose of collection of data.
Multiply collects and processes location information for the purpose of recording Safe Dayz journeys and Safety Alert emergency callouts. These features are voluntarily activated as part of the products signed up for with Multiply and Momentum Metropolitan.
5. Confidentiality and security
5.1 Routine precautions
Multiply has physical, technological and procedural security safeguards in place and will use its best endeavours to protect your personal information.
Personal information refers to information that identifies or relates specifically to you, which for example include:
Your assets and liabilities
Your employment details
Your contact details
Your marital status
Bank account information
Medical or health information
Your policy information
Any information about what you buy, where you shop, where you bank, how you invest, your health behaviour, your health transactions and all related information will also be regarded as personal information.
In short, any information that we know about you will be regarded as your personal information.
6. Your personal information
6.1 Securing personal information
Multiply will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. The company will store all the personal information in secured environments, for example on secured servers in a protected data centre.
6.2 How you can review and correct your personal information
You can request to review your personal information contained in Multiply’s records at any time to correct or update the information. If the purpose for which your personal information was requested initially does not exist anymore, for example you no longer have a contract with us, you may request information held by the company to be removed. However, Multiply can decline your request to delete the information from its records if other legislation requires the continued retention thereof or if it has been de-identified.
6.3 Managing data privacy at Momentum Metropolitan Board level and reporting frequency
The Momentum Metropolitan Board Risk Capital and Compliance Committee (BRCC) is a sub-committee of the Board that is accountable to address and manage the risk of data privacy and cyber security. The BRCC follows the board cycle and convenes on a quarterly basis. The Momentum Metropolitan Chief Risk Officer (CRO) is the business representative on BRCC for data privacy, data security and cyber security. The Momentum Metropolitan Chief Risk Officer and Multiply’s Chief Risk Officers provide guidance and input regarding appropriate risk management.
6.4 Employee training on cyber security and data privacy
Employee training on cyber security and data privacy forms part of ongoing compliance training. Cyber security training is currently further required as a basic compliance training that all employees must complete. As part of the POPIA management programme, there is specific focus on training, awareness as well as communication, that will cover data privacy, data security and more detailed cyber security training as mandatory compliance training for all staff. The POPIA management programme is actively managed at Momentum Metropolitan Group level with participation of all business entities and subsidiaries of Momentum Metropolitan, including Momentum Multiply.
6.5 Centralised cyber security and data security functions and coordination
To deal with cyber security and data privacy, two separate centralised functions exist within Momentum Metropolitan. The IT security environment includes the management of cyber security as a capability and the data management environment deals with the aspects of data privacy and extended data security and privacy, which is enabled through IT security.
Multiply uses and stores cookies, pixels, and other technologies (collectively, cookies) to recognise your browser or device and provide you with essential features and services, and for additional purposes, including:
Recognising you when you sign-in to use our services. This allows us to provide you with product recommendations, display personalised content, and recognises you as a registered member;
Conducting research and diagnostics to improve Multiply’s content, products, and services;
Preventing fraudulent activity;
Improving security; and
Reporting. This allows us to measure and analyse the performance of our services.
You can manage browser cookies through your browser settings. The “Help” feature on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, how to block cookies, and when cookies will expire.
You agree that we will be entitled to send cookies from this website to your computer. We use the word cookie to refer to information that is sent from this website to your hard drive, where it is saved. It contains information to personalise your experience on this website. In this way, the next time you use this website we will know who you are and that you have visited this website before.
6.7 Third parties
6.8 Sharing your information
Multiply will only share your personal information with third parties if you have consented to such disclosure. If consent has been obtained, the company may share your personal information with persons or organisations within and outside of MMH.
Where Multiply discloses personal information to intermediaries, other financial institutions, insurers or any other third parties, the third parties will be obliged to use that personal information only for the reasons and purposes it was disclosed for. Multiply may be obliged to disclose your personal information to the extent that it is required to do so by law, in connection with any legal proceedings or prospective legal proceedings, or for the purposes of protecting the interest of its members, for example, fraud prevention or to give effect to an agreement.
Your privacy is important to us. We will therefore not sell, rent or provide your personal information to unauthorised entities or other third parties, for their independent use, without your consent.
We may disclose your personal information to the following third parties:
Other companies in the Momentum Metropolitan Holdings Group of companies;
Selected third parties to provide us with services, including companies that provide us with technical support and assistance in respect of the website, companies that provide back-office services, companies that provide hosting services or, that track the website’s activities and analytics, and companies engaged to market and distribute MMH products or services and conduct research on our behalf;
Professional advisers, judicial, regulatory and law enforcement bodies;
A third party that acquires all or part of our assets or shares, or that succeeds us in carrying on all or a part of our business, whether by merger, acquisition, re-organisation or otherwise;
In order for us to ensure that we meet your needs, we may collect and analyse your personal information and combine all the information that we have about you to compile a profile of you for us to personalise and tailor our services to meet your specific needs; and
Once we have collected and analysed your personal information, we may send you promotional material or details which we think may be of interest to you. If any of this promotional information relates to products, promotions, news or services of an affiliate party, and if you indicate that you would like more details, we may inform the affiliate party to contact you directly. We will, however, only inform an affiliate party to contact you directly if you have indicated that you agree.
If at any stage, after you have given us your consent, you no longer wish for us to use or share your personal information with an affiliate party, you may withdraw your consent at any stage. By choosing to withdraw your consent to affiliated third parties there may be an impact on our offering to you, and it will be explained to you on your request to withdraw your consent.
6.9 Cross border sharing
We will only transfer your personal information to third parties in another country under one or more of the following circumstances:
Where your personal information will be adequately protected under the other country’s laws or an agreement with the third-party recipient;
Where the transfer is necessary to enter into, or perform, under a contract with you or a contract with a third party that is in your interest;
Where you have consented to the transfer;
Where it is not reasonably practical to obtain your consent, and the transfer is in your interest.
This transfer will happen within the requirements and safeguards of the law. Where possible, the party processing your personal information in the other country will agree to apply the same level of protection as available by law in your country, or if the other country’s laws provide better protection, the other country’s laws would be agreed to and applied.
An example of us transferring your personal information to another country would be when you make payments if you purchase goods or services in a foreign country.
TAKE NOTE: As the MMH Group operates in several countries, your personal information may be shared within the MMH group entities in other countries and processed in those countries.
7.2 Which laws apply?
If you have any questions about this notice or Multiply’s treatment of your personal information, send an email to [email protected].