Privacy Notice

INSURIS (Pty) Ltd (registration number 2026 / 696970 / 07) is the responsible party for personal information covered by this notice. In this notice, "INSURIS", "we", "us" and "our" mean INSURIS (Pty) Ltd.

• Address: Hurlingham, Sandton 2196
• Information Officer: Michael Daffy, Managing Director
• Email: info@insuris.co.za

This website is a pre-launch information page. It does not offer financial services, and it does not currently collect personal information through a form.

This notice applies to:

• information you send us by email;
• information we still hold if you previously asked to receive launch updates; and
• limited technical information our hosting provider processes so the website can be delivered and protected.

If you email us, we receive the details you choose to include, such as:

• your name;
• your email address;
• the contents of your message and any attachment; and
• the date and time we receive it.

If you previously joined the launch list, we may still hold:

• your email address;
• your first name, if you gave it;
• the date and time you gave consent, and the wording you agreed to; and
• a one-way scrambled (hashed) version of your IP address and your browser type, recorded to limit abuse of the sign-up form.

When you open the website, our hosting provider may process your IP address, the date and time of the visit, your browser type, and the page you requested. We use that information to operate and secure the website. We do not use it to identify you for marketing.

Please do not send us your identity number, contact number, banking details, health information, or any other financial or special personal information. We do not ask for it. If you send it anyway, we will delete it unless we have to keep it by law.

We use personal information only to:

• read and reply to messages you send us;
• send launch updates to people who asked for them;
• keep a record of that correspondence and of the consent we were given;
• operate, secure, and improve the reliability of this website; and
• meet a legal duty, or respond to a lawful request.

We do not sell personal information. We do not use it to make a decision about you by automated means alone.

We rely on the following grounds in section 11 of POPIA:

• your consent, where you asked us to email you launch updates (section 11(1)(a));
• our legitimate interest in answering people who contact us, keeping a record of that contact, and running a secure website (section 11(1)(f)); and
• a legal obligation, where the law requires us to keep or disclose information (section 11(1)(c)).

Where we rely on legitimate interest, we do so only where that interest is not outweighed by your rights. You may object to that processing, as set out under "Your rights" below.

Giving us information is voluntary. If you choose not to, we may be unable to reply to you or to send you a launch update.

We share personal information with service providers who process it for us (operators), and only for the purposes in this notice:

• Vercel Inc., which hosts this website; and
• Supabase Inc., which provides the database in which launch-list records, if any, are stored.

Launch emails are sent from info@insuris.co.za. If we later appoint an email service provider to send them, that provider will be an operator and we will name it in this notice.

We may also disclose information:

• if the law, a court, or a regulator requires it;
• to protect our rights, or the rights of another person; or
• to a purchaser of our business, if the information is needed for that transaction and the recipient agrees to protect it.

We do not share your information with others for their own marketing.

Vercel and Supabase may store information on servers outside South Africa, including in the United States. We transfer personal information outside South Africa only where section 72 of POPIA allows it. Our contract with each provider requires it to keep the information confidential, to use it only on our instructions, and to protect it by standards substantially similar to POPIA's conditions for lawful processing, including limits on any further transfer.

We keep personal information only for as long as we need it:

• launch-list records, until you unsubscribe or for 12 months after we launch or decide not to launch, whichever comes first;
• email correspondence, for as long as we need to deal with your message and for up to five years afterwards, so we have a record of what was said; and
• hosting and security logs, for the limited period our hosting provider keeps them in order to operate and protect the website.

We may keep information for longer where the law requires it, or where it is needed for a legal claim. When we no longer need it, we delete it or de-identify it.

We use reasonable technical and organisational measures to protect personal information. Access to records is limited to people who need them for the purposes in this notice. Information is transmitted over encrypted connections, and launch-list records are stored in an access-controlled database.

No method of storage or transmission is completely secure. If a compromise creates a reasonable risk of harm, we will notify you and the Information Regulator as required by section 22 of POPIA.

We send electronic messages about the launch only to people who asked for them. Each message will tell you how to opt out. You may also withdraw that consent at any time by emailing info@insuris.co.za. Withdrawing consent does not affect processing that was lawful before we received your request.

Under POPIA you may:

• ask whether we hold personal information about you, and ask for a copy;
• ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully;
• withdraw consent, including consent to launch updates;
• object to processing that we carry out on a legitimate-interest ground, including direct marketing; and
• lodge a complaint with the Information Regulator.

Email info@insuris.co.za to exercise these rights. We may need to confirm your identity before we act. We will respond as soon as reasonably practicable. We may refuse a request where the law allows us to, and we will explain why.

You may also ask the Information Officer for access to a record under the Promotion of Access to Information Act 2 of 2000 (PAIA). Send the request to info@insuris.co.za. We will tell you if the request needs to be in a prescribed form, whether a fee applies, and how the request will be handled.

Information Regulator (South Africa)Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Telephone: 010 023 5200
Toll free: 0800 017 160
Website: inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za

A complaint to the Information Regulator should be made on the prescribed form (Form 5), which is available from the Regulator.

This website does not use tracking, analytics, or advertising cookies. The technical information described in section 3 is processed to deliver and protect the site. If we introduce any non-essential cookie, we will update this notice first and ask for your consent where the law requires it.

This website is not aimed at anyone under 18. We do not knowingly collect personal information about a child. If you believe we have done so, email info@insuris.co.za and we will delete it.

We may update this notice from time to time. The current version will always be on this page, with the date it was last updated. The date at the top of this page is 13/10/2026.