Privacy Policy

Privacy Policy

1. INTRODUCTION AND STATUTORY DISCLOSURE

1.1 IUX Markets ZA (PTY) Ltd (the “Company”) is an Authorized Financial Services Provider (FSP No. 53103) regulated by the Financial Sector Conduct Authority (FSCA) in South Africa. The Company’s registered office is located at 18 Cavendish Road, Claremont, Cape Town, Western Cape, 7708.

1.2 In terms of its FSCA license, the Company is authorized as a Category I FSP to render intermediary services only. Clients are hereby notified that:

• The Company does not act as a principal or counterparty to any Contract for Difference (CFD) or derivative transaction.
• The counterparty and product supplier for all financial products is IUX Markets (Mauritius), which is licensed and regulated by the Financial Services Commission (FSC) of Mauritius (License GB22200605).
• This disclosure is made in accordance with Section 4(1) of the FAIS General Code of Conduct to ensure clients are fully informed of the identity and regulatory status of the product supplier.

2. PURPOSE AND SCOPE OF THE POLICY

2.1 The Company is legally obligated to ensure the protection of its Clients’ personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and the Financial Advisory and Intermediary Services Act, 2002 (FAIS). This Policy applies to all natural persons and, where applicable, identifiable, existing juristic persons (including companies, trusts, and partnerships) whose personal information is processed by the Company.

2.2 This Policy covers all personal information collected, stored, processed, or transferred by IUX ZA in its capacity as a Responsible Party (as defined in Section 1 of POPIA). This includes information processed in the course of providing intermediary services, as well as data provided when establishing an account, posting reviews, or communicating with the Company through any interface.

2.3 This Policy specifically covers the website www.iux.za.com and its related sub-domains, mobile applications, and trading interfaces operated by IUX Markets ZA (PTY) Ltd (hereinafter the “Website”).

2.4 Please be informed that if you have been invited to submit reviews by third-party businesses using our services, or by us on their behalf, those businesses act as the independent Responsible Parties for such invitations and any personal information linked with them. If you have any queries regarding such invitations or wish to exercise your rights concerning information used in that context, please contact the relevant businesses directly, as IUX ZA does not determine the purpose or means of that specific processing.

3. INTERPRETATION OF TERMS

3.1 Unless otherwise stated herein, the following terms shall have the meaning as set forth below:

• “Advice” means any communication of a value judgment to a client on a financial product to influence that client to purchase, invest in, or terminate a financial product, as defined in Section 1 of the FAIS Act.
• “Applicable Laws” means the Protection of Personal Information Act, 2013 (POPIA), the Financial Advisory and Intermediary Services Act, 2002 (FAIS), the Financial Intelligence Centre Act, 2001 (FICA), and any other legislation in force within the Republic of South Africa.
• “Consent” means any voluntary, specific, and informed expression of will in terms of which permission is given for the processing of personal information.
• “Data Subject” means the person to whom personal information relates, which includes any living natural person and, where applicable, an identifiable, existing juristic person (including but not limited to companies, trusts, and partnerships).
• “Intermediary Service” means any act performed by a person for or on behalf of a client or product supplier which results in a client entering into a transaction involving a financial product, excluding the furnishing of advice.
• “Operator” means a person or entity who processes personal information for a Responsible Party in terms of a contract or mandate, without coming under the direct authority of that party.
• “Personal Information” means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including but not limited to: race, gender, pregnancy, marital status, nationality, age, physical or mental health, well-being, disability, religion, belief, culture, language, and birth; any identifying number, symbol, email address, physical address, telephone number, location information, online identifier, or other particular assignment to the person; and the name of the person if it appears with other personal information.
• “Processing” means any operation or activity, whether or not by automatic means, concerning personal information, including the collection, receipt, recording, organization, collation, storage, updating, modification, retrieval, dissemination by means of transmission, distribution, or destruction of information.
• “Product Supplier” means IUX Markets (Mauritius), being the legal entity that issues the financial products (CFDs) and acts as the principal/counterparty to the transaction.
• “Responsible Party” (formerly referred to as Data Controller) means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information. For the purposes of this policy, IUX Markets ZA (PTY) Ltd is the Responsible Party.

4. COLLECTION OF PERSONAL INFORMATION

4.1 When registering for an IUX Markets user account, creating a business account on behalf of a company, or otherwise utilizing our platform, you acknowledge and agree that IUX ZA, acting as the Responsible Party, will collect and process your personal information.

4.2 This processing is conducted based on one or more of the following lawful grounds as prescribed by Section 11 of POPIA:

• Performance of a Contract: To facilitate your account opening and provide intermediary services.
• Compliance with Legal Obligations: To satisfy mandatory requirements under the Financial Intelligence Centre Act (FICA) and the FAIS Act, including “Know Your Customer” (KYC) and Anti-Money Laundering (AML) verifications.
• Legitimate Interests: For the detection and prevention of fraud, and the protection of the Company’s legal rights in the event of a dispute.
• Consent: Where you have provided voluntary, specific, and informed permission (e.g., for marketing communications).

4.3 IUX ZA shall collect personal information using lawful and fair methods. We adhere strictly to the principle of data minimization, ensuring that we collect only the information that is adequate, relevant, and necessary for the purposes of providing our functional services and adhering to regulatory requirements.

5. Scope of Personal Information Collection

5.1 IUX ZA collects and processes personal information of both natural persons and identifiable, existing juristic persons only for specific, legitimate purposes. The types of personal information we collect include, but are not limited to:

• Contact Information: Name, email address, physical address, and telephone numbers.
• Device and Location Details: IP address, browser type, language, time zone, and geolocation data.
• User Account Information: Username, password, photograph, and preferred language.
• Business Account Information: For juristic entities, this includes company name, registration number, domain, and details of the business profile.
• Usage and Profiling Information: Search history on the platform, interaction logs, and email engagement (e.g., links clicked).
• Identification and Verification Information:
  • Natural Persons: Proof of Identity (POI) and Proof of Address (POA) documents, including images, document numbers, and expiry dates .
  • Juristic Persons: Verification of Beneficial Ownership, identifying the natural persons who ultimately own or control the legal entity .
  • Screening Data: Information used to determine if a data subject is a Prominent Influential Person (PIP) or Politically Exposed Person (PEP) in accordance with FICA Schedule 3A and 3B .
• Communication Information: Metadata and content of electronic communications (emails, notices, comments, and requests).
• Call Recordings: All inbound and outbound phone calls are recorded for quality control and compliance. In accordance with the 2025 POPIA Regulations, these recordings are available to you upon request .
• Social Network Information: Data you choose to make public on linked social platforms, subject to your privacy settings on those networks.

5.2 The collection of the information listed above is mandatory for compliance with the Financial Intelligence Centre Act (FICA), 38 of 2001, and the FAIS Act, 37 of 2002. Failure to provide this information will result in the Company being unable to establish a business relationship or perform trading operations on your behalf. Throughout our relationship, we will collect transactional data and records of complaints or enquiries to satisfy our 5-year statutory record-keeping obligations .

5.3 We may collect additional information voluntarily provided by you during communications to improve our understanding of your needs. If we record these communications telephonically, we will record your objection or consent electronically and make it available to you on request.

5.4 If you provide personal information of third parties (e.g., family members or emergency contacts), you must inform them of this Policy and their rights under POPIA. You warrant that you have obtained the necessary consent or have a lawful basis to share their data with IUX ZA as the Responsible Party.

5.5 If IUX ZA intends to process personal information for a purpose other than that for which it was collected, we will notify you beforehand. Where no other legal basis (such as a legal obligation or contract performance) justifies the further processing, we will obtain your voluntary, specific, and informed consent .

6. How We Collect Personal Information

6.1 Direct Collection: IUX ZA primarily collects personal information directly from the Data Subject. This occurs through various channels, including but not limited to:

• The submission of physical or digital identification and residency documents during the onboarding process.
• Direct communications via the platform’s secure portal, email, or telephone.
• Electronic forms completed on www.iux.za.com or its related sub-domains.

6.2 Indirect Collection from Third Parties: To comply with the Financial Intelligence Centre Act (FICA) and ensure market integrity, the Company may collect additional personal information from third-party organizations. These sources include:

• Credit Reference and Fraud Prevention Agencies: To assess creditworthiness and prevent financial crime.
• Verification Service Providers: To authenticate the validity of identification documents and business registrations.
• Public and Government Registries: Such as the CIPC or Targeted Financial Sanctions lists.
• Social Networks: Where you choose to link your IUX Markets profile to your social media accounts, subject to your privacy settings.

6.3 Automated Collection: We also automatically collect information through your interaction with our digital interfaces, including cookies, IP addresses, and browser preferences, as detailed in our Cookie Policy.

7. Personal Information Received From Data Subjects Directly

7.1 IUX ZA, acting as the Responsible Party, collects personal information directly from you (the “Data Subject”) in both natural and juristic capacities. This information is gathered through your identification documents and other data you entrust to us during the course of business. This collection is performed to satisfy our contractual obligations to you and our statutory duties under the FAIS Act and FICA.

7.2 Information collected directly includes, but is not limited to:

• Data provided during the account registration process (printed or digital forms).
• Information arising from your use of our services, including trading history, digital channel visits, and platform searches.
• Communications across all channels, including telephone recordings, email, and social media interactions.
• Personal and business details entered to engage with our marketing communications or platform features.

7.3 We also collect information directly when you:

• Enter into legal contracts or intermediary agreements with IUX ZA.
• Submit documents for “Know Your Customer” (KYC) and Anti-Money Laundering (AML) verification.
• Make payments or provide financial instructions related to your trading account.
• Inquire, comment, or submit formal complaints via telephone, electronic mail, or any other means of communication.

7.4 Where you furnish information telephonically, IUX ZA will record such communication for quality control and to meet our statutory record-keeping requirements under the FAIS General Code of Conduct. These records are maintained for a minimum of five (5) years and are available to you upon request.

8. Personal Information Received from Third Parties

8.1 While IUX ZA primarily collects information directly, we may, in accordance with Section 12 of POPIA, receive personal information relating to natural or juristic persons from third-party sources where such collection is necessary to comply with a legal obligation or to protect a legitimate interest.

8.2 These third-party sources include, but are not limited to:

• Regulatory and Government Registries: The Companies and Intellectual Property Commission (CIPC), and various Targeted Financial Sanctions (TFS) lists.
• Verification Service Providers: Third-party “Know Your Customer” (KYC) and “Anti-Money Laundering” (AML) authentication services used to verify the validity of identification and residency documents.
• Financial Institutions and Credit Bureaus: To assess financial standing, verify bank account details (Proof of Bank), and prevent market abuse or fraud.
• Public and Commercial Sources: Information already made public by the Data Subject or available through commercial business databases and social networks.

9. Personal Information Received From Data Subject Automatically

9.1 IUX ZA automatically collects and processes certain identifiers when you interact with our digital platforms. In accordance with POPIA, these identifiers are treated as Personal Information and include :

• Device and Connection Data: Your IP address, unique device identifiers, browser type, language settings, and time zone.
• Location Information: Geolocation data derived from your IP address or mobile device settings.
• Usage and Interaction Data: Details of your activity on the platform, including search history, features accessed, time spent on specific pages, and interaction with marketing emails or notifications.

9.2 We use this automatically collected data to:

• Security: Authenticate your session and detect unauthorized access attempts or fraudulent activity.
• Service Optimization: Improve platform functionality and tailor the user interface to your browser and language preferences.
• Compliance: Monitor for potential market abuse and maintain a secure trading environment as required by our regulatory mandates.

10. Notification and Your Right to Object

10.1 Right to be Informed: In accordance with Section 18 of POPIA, IUX ZA (the “Responsible Party”) ensures that you are informed of the specific, explicitly defined, and lawful purposes for which your personal information is collected. This includes the legal basis for processing (such as contract performance or FICA obligations) and the identity of any third-party recipients, such as IUX Markets (Mauritius). Where processing is based on consent, such consent must be voluntary, specific, and an informed expression of your will.

10.2 Legacy Data: For any personal information collected prior to the full commencement of POPIA on July 1, 2021, IUX ZA continues to process such information only for the original purposes for which it was obtained. However, all such processing is now conducted in strict accordance with the eight (8) conditions for lawful processing as prescribed by South African law.

10.3 Withdrawal of Consent: You have the right to withdraw your consent for the processing of your personal information at any time by contacting us at [email protected]. However, please be informed that:

• The withdrawal of consent does not affect the lawfulness of any processing that occurred before the withdrawal.
• IUX ZA may continue to process your information if such processing is necessary for the performance of our contract, to protect a legitimate interest, or to comply with a legal obligation (such as the 5-year data retention mandate under FICA and the FAIS Act).
• If the information is mandatory for client identification (KYC), the withdrawal of consent or an objection to processing may result in the immediate termination of your trading account and our intermediary services.

11. Processing of Personal Information

11.1 In accordance with the eight conditions for lawful processing under POPIA, IUX ZA (the “Responsible Party”) will only process your personal information according to the legal bases and for the specific, explicitly defined purposes set out below.

11.2 We process personal information based on one or more of the following legal grounds as prescribed by Section 11 of POPIA:

• Performance of a Contract: Processing is necessary to provide intermediary services or to take pre-contractual steps at your request.
• Compliance with Legal Obligations: Processing is mandatory to comply with the Financial Intelligence Centre Act (FICA), the FAIS Act, and tax legislation.
• Legitimate Interests: Processing is necessary for the legitimate interests of IUX ZA or a third party (e.g., fraud prevention, debt collection, or system security).
• Consent: Where you have provided voluntary, specific, and informed permission.

11.3 IUX ZA shall process your personal information for the following specific purposes:

• Service Provision: Facilitating account opening, issuing credentials, and providing access to the trading platform and IUX ZA Website.
• Statutory Identification: Performing “Know Your Customer” (KYC) and Anti-Money Laundering (AML) verifications, including screening against Targeted Financial Sanctions lists and PIP/PEP registries.
• Contractual Transmission: Transferring necessary data to IUX Markets (Mauritius) to enable the execution of CFD transactions and the fulfillment of your trading mandates.
• Cyber Resilience: Monitoring systems to detect, prevent, and report cyber threats and material incidents in accordance with the FSCA/PA Joint Standard on Cybersecurity.
• Communication & Support: Responding to inquiries, providing customer service, and issuing newsletters (subject to your right to opt-out).
• Quality & Training: Recording telephonic communications for training and compliance purposes, which are available to you upon request.
• Audit & Enforcement: Conducting internal audits and enforcing our Terms and Conditions.

11.4 Data Minimization: IUX ZA adheres to the principle of minimality. We ensure that personal information processed is adequate, relevant, and not excessive in relation to the purpose for which it is processed.

11.5 Withdrawal of Consent: You have the right to revoke your consent at any time (e.g., by unsubscribing from marketing). However, please note:

• Withdrawal of consent does not invalidate processing that was based on consent before its withdrawal.
• IUX ZA is entitled and required to continue processing your information if such processing is justified by another legal basis, such as the 5-year statutory retention mandate under FICA or for the performance of an ongoing contract.
• Where the information is mandatory for statutory compliance, revocation of consent may result in the termination of our services and the closure of your account.

12. Disclosure and Transborder Transfer of Personal Information

12.1 When IUX ZA (the “Responsible Party”) discloses a Data Subject’s personal information to third-party service providers or affiliates (the “Operators”), IUX ZA will implement appropriate technical and organizational measures to ensure the integrity and confidentiality of the information. Such disclosure will be governed by a written contract in accordance with Section 21 of POPIA, ensuring that the Operator processes information only with the knowledge or authorization of IUX ZA and treats it as confidential.

12.2 In accordance with Section 72 of POPIA, IUX ZA may transfer personal information to a third party in a foreign country only if that recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection substantially similar to the conditions for lawful processing in South Africa.

12.3 Clients are hereby informed that IUX ZA transfers personal information to IUX Markets (Mauritius) for the purpose of account fulfillment, execution of transactions, and the performance of the underlying contract. As the South African Information Regulator has not formally designated Mauritius as providing an “adequate level of protection” via an official whitelist, IUX ZA ensures that such transfers are governed by a Binding Inter-Company Agreement. This agreement incorporates Standard Contractual Clauses that mandate IUX Markets (Mauritius) to provide safeguards and data subject rights that are substantially similar to those afforded under POPIA.

13. Disclosure and Transborder Transfer of Personal Information

13.1 IUX ZA, as the Responsible Party, may disclose personal information of both natural and juristic Data Subjects to the following categories of recipients in accordance with the lawful bases and purposes set out in this Policy:

• Affiliates and Group Entities: Including IUX Markets (Mauritius) and other related entities, where such disclosure is necessary for account fulfillment, risk management, and the performance of our intermediary contract.
• Operators (Third-Party Service Providers): Including providers of data technology, payment processing, KYC/AML authentication, data analysis, and marketing services. All such disclosures are governed by written contracts in terms of Section 21 of POPIA, ensuring the Operator maintains strict confidentiality and technical security.
• Professional Consultants: Internal and external legal advisors, auditors, and compliance experts.
• Regulatory and Government Authorities: Including the Financial Sector Conduct Authority (FSCA), the Financial Intelligence Centre (FIC), and tax authorities (SARS), where disclosure is required by law or formal request.
• Authorized Third Parties: Any individual or entity to whom you have provided voluntary, specific, and informed consent for disclosure.

13.2 Data Minimization and Security: When disclosing information to third-party Operators, IUX ZA ensures that only the minimum amount of personal information required for the specific purpose is shared. We utilize encryption and pseudonymization techniques where appropriate. We do not permit Operators to use your personal information for any purpose other than the agreed mandate.

13.3 Transborder Information Flows (Section 72): To provide our intermediary services, IUX ZA is required to transfer your personal information to data recipients in foreign jurisdictions, primarily to IUX Markets (Mauritius) for the execution of CFD transactions.

13.4 In accordance with Section 72 of POPIA, IUX ZA ensures that such transfers are lawful by satisfying at least one of the following conditions:

• The recipient is subject to a law or Binding Corporate Rules that provide an adequate level of protection substantially similar to POPIA.
• The transfer is governed by a Binding Inter-Company Agreement that incorporates Standard Contractual Clauses mandating the recipient to uphold the data protection principles found in South African law.
• The transfer is necessary for the performance of the contract between you and IUX ZA, or for the implementation of pre-contractual measures taken at your request.

13.5 While some jurisdictions (such as Mauritius or Saint Lucia) may not have an adequacy designation from the South African Information Regulator, IUX ZA attests that it implements appropriate contractual safeguards to ensure your data remains protected to the standards required by the Republic of South Africa.

14. Retention and Destruction of Personal Information

14.1 Storage Standards: IUX ZA, as the Responsible Party, stores personal information of both natural and juristic Data Subjects in physical and digital formats at our authorized premises and on secure servers. We implement appropriate technical and organizational security measures to protect this information from unauthorized access, loss, or destruction in accordance with Section 19 of POPIA.

14.2 Statutory Retention Periods: In accordance with the Financial Intelligence Centre Act (FICA), 38 of 2001, and the FAIS Act, 37 of 2002, IUX ZA is legally mandated to retain records for a minimum of five (5) years. This period is calculated as follows :

• Customer Due Diligence (KYC): Five years from the date the business relationship with the Client is formally terminated.
• Transaction Records: Five years from the date the specific transaction was concluded or the financial service was rendered.
• Communications: Five years from the date the communication (written or telephonic) occurred.

14.3 Ongoing Account Retention: Personal information is otherwise retained for the duration of your active user or business account to provide you with our intermediary services. Should you choose to deactivate your account, IUX ZA will maintain a deactivation log (containing your name, email, and deactivation date) and will continue to preserve all records subject to the statutory mandates or compelling legitimate interests (such as fraud prevention or the defense of legal claims) described above.

14.4 Destruction and De-identification: Once the statutory retention period has expired and the information is no longer required for its original purpose or any justifiable legal basis, IUX ZA will securely delete, destroy, or de-identify the information. Destruction is carried out using methods that ensure the information cannot be reconstructed or re-identified.

14.5 Right to Request Erasure: Subject to the legal limitations mentioned in Section 14.2, you have the right to request the erasure of your personal information. Please be informed that IUX ZA cannot fulfill an erasure request for information that we are legally required to maintain under South African financial or tax laws until the relevant statutory period has lapsed.

15. Security Measures for Personal Information Protection

15.1 Statutory Duty to Secure: In accordance with Section 19 of POPIA, IUX ZA (the “Responsible Party”) has implemented rigorous technical and organizational safeguards to ensure the integrity and confidentiality of your personal information. These measures are designed to prevent the unauthorized access, loss, or destruction of data belonging to both natural and juristic persons.

15.2 Cyber Resilience Standards: As an authorized FSP, IUX ZA complies with the Joint Standard on Cybersecurity and Cyber Resilience (Joint Standard 2 of 2024). Our security framework includes continuous system monitoring, threat-led penetration testing, and strict encryption protocols for data at rest and in transit. Where third-party Operators process data on our behalf, they are bound by written contracts in terms of Section 21 of POPIA to maintain equivalent security standards.

15.3 Internet Communications: While we implement advanced encryption, you acknowledge that no data transmission over the Internet can be entirely secure. You are advised to use the platform’s secure portal for all sensitive communications. In the event of a Security Compromise (data breach), IUX ZA will notify the Information Regulator and the affected Data Subjects as soon as reasonably possible in accordance with Section 22 of POPIA.

16. Automated Decision-Making and Profiling

16.1 Section 71 Rights: In accordance with Section 71 of POPIA, you have the right not to be subject to a decision which results in legal consequences or significantly affects you, if that decision is based solely on the automated processing of your personal information.

16.2 Exceptions for Contract Performance: IUX ZA may utilize automated systems for the purpose of risk profiling, fraud detection, and determining your suitability for trading accounts (KYC). These automated processes are necessary for the performance of the contract between you and the Company or to comply with our statutory duties under the FAIS Act and FICA.

16.3 Right to Human Intervention: Where an automated decision significantly affects you (such as an automated account closure or rejection), you have the right to:

• Request human intervention and a review of the decision by a qualified staff member.
• Be provided with a reasonable opportunity to make representations to IUX ZA regarding the decision.
• Contest the automated decision if you believe the underlying data or logic is incorrect.

16.4 IUX ZA ensures that all automated systems are regularly audited for bias and accuracy to remain compliant with the 2026 enforcement guidelines issued by the Information Regulator.

17. Rights of the Data Subject

17.1 As a Data Subject (whether a natural or juristic person), you possess specific rights under POPIA regarding the personal information IUX ZA (the “Responsible Party”) holds about you. These rights are subject to justifiable limitations, such as legal obligations under FICA or the protection of the rights of others.

17.2 Your Statutory Rights include:

• Right to be Notified: You have the right to be informed that your personal information is being collected and to be notified “as soon as reasonably possible” in the event of a security compromise (data breach).
• Right of Access: You have the right to establish whether we hold personal information about you and to request a record or description of that information. In accordance with the 2025 Amended Regulations, such requests are generally free of charge, though we may verify your identity before disclosure.
• Right to Correction: You have the right to request the correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, or misleading.
• Right to Object: You have the right to object to the processing of your personal information at any time, on reasonable grounds, unless South African law (such as FICA) requires such processing.
• Right to Object to Direct Marketing: You have the right to object to the processing of your data for direct marketing purposes via unsolicited electronic communications.

17.3 Exercising Your Rights: To exercise any of the above rights, please contact our Information Officer at [email protected]. In accordance with the 2025 Regulations, you may submit requests via email or any other expedited electronic channel.

• Correction/Deletion Requests: These should be submitted on a form substantially similar to Form 2 of the POPIA Regulations.
• Verification: To protect your security, we require valid proof of identity (and, for juristic persons, proof of authorization) before processing access or correction requests.
• Response Time: We will acknowledge your request immediately and provide a substantive response within a reasonable time.

17.4 Limitations on the Right to Deletion (Erasure): Please be informed that while you may request the deletion of your account, IUX ZA is legally mandated by the Financial Intelligence Centre Act (FICA) and the FAIS Act to retain your identification and transaction records for a minimum of five (5) years after our business relationship has ended. We cannot fulfill a deletion request for such records until this statutory period has lapsed.

17.5 Withdrawal of Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing that occurred before the withdrawal.

17.6 Complaints: If you believe your rights under POPIA have been infringed, you have the right to lodge a complaint with the Information Regulator.

• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001.
• Email: [email protected].

18. Children’s Information

18.1 Statutory Prohibition: In accordance with Section 34 of POPIA, the processing of personal information relating to a child (any natural person under the age of 18) is generally prohibited.

18.2 Platform Restrictions: Our platform and intermediary services are strictly intended for adults. IUX ZA does not intentionally collect or process personal information from children. If we discover that personal information of a child has been submitted to us without the verifiable consent of a competent person (parent or legal guardian), we will take immediate steps to delete such information from our records.

18.3 Verification Duty: In the event that processing of a child’s data is required by law or justified by consent, IUX ZA will implement reasonable measures to verify the identity of the competent person and the validity of the consent, in accordance with the 2025 Amended POPIA Regulations.

19. Privacy Policy Revision

19.1 Right to Amend: IUX ZA (the “Responsible Party”) reserves the right to amend, revise, or modify this Policy at any time to reflect changes in South African law or our operational practices.

19.2 Notification of Changes: While minor changes will be effective immediately upon posting to www.iux.za.com, any material changes that affect your rights or the way we process your data will be notified to you via email or a prominent notice on our platform at least thirty (30) days before the changes take effect.

19.3 Continued Use: Your continued use of our services following the effective date of any revision constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy regularly to stay informed of our data protection standards.

20. Contact Us and Complaints

20.1 Information Officer: Should you have any questions regarding this Policy, wish to exercise your rights, or require access to our PAIA Manual, please contact our Information Officer at [email protected]. IUX ZA ensures that its Information Officer is duly registered with the Information Regulator in accordance with Section 55 of POPIA.

20.2 Trading and Service Complaints: If you are dissatisfied with our intermediary services or have a dispute regarding a trading activity, please refer to our Complaint Handling Policy, available on www.iux.za.com. We are committed to resolving all market conduct issues fairly and transparently in accordance with the FAIS Act.

20.3 Privacy Complaints: If your complaint relates specifically to a violation of your personal information rights and you are dissatisfied with our internal resolution, you have the right to lodge a formal complaint with the Information Regulator (South Africa).

20.4 Information Regulator Contact Details (Current 2026):

• Physical Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.
• Postal Address: P.O. Box 31533, Braamfontein, Johannesburg, 2017.
• Telephone: (+27) 10 023 5200.
• General Enquiries: [email protected].
• POPIA Complaints: [email protected].
• PAIA Complaints: [email protected].
• Website: https://inforegulator.org.za