Maltech-Africa Veritas: Privacy Policy
Effective date: 1 January 2026 | Version 1.0
Maltech-Africa Veritas ("Veritas", "we", "us", "our") is a compliance, valuation and business-data bureau operated by:
Maltech Africa Business Consultancy & Advisory Services
Registration No: 2022 / 541785 / 07
Registered address: 156A Geldenhuys Street, Patryshoek AH, Pretoria, Gauteng, 0018
Also registered with the Information Regulator under the names "Maltech-Africa Business Solutions" and "Mutara Africa Link Technologies (Maltech-Africa)".
We are the responsible party for personal information processed through africasmeveritas.org and our services, as defined in the Protection of Personal Information Act 4 of 2013 (POPIA).
Information Officer: Innocent Muchererwa
Information Regulator registration number: 0001553/2024-2025-IRRT/PR
Contact: info@africasmeveritas.org | +27 68 073 6785
This policy explains what personal information we collect, why, how we use and protect it, who we share it with, and your rights. It applies to visitors to our website, businesses and individuals who use our services, and businesses that register in the Veritas Data Pool.
"Personal information" includes information about an identifiable individual and, where applicable, an identifiable juristic person (such as a company).
• Contact details: name, email address, phone or WhatsApp number
• Business details: business name, registration number, registration country, industry, address, ownership and control information, turnover range, number of employees
• Director, owner and authorised-signatory identity information (for verification)
• Tax and compliance status information
• Financial information provided for valuation or funding facilitation (for example financial statements, bank statements)
• Documents you upload
• Enquiry messages and correspondence
• Public registries and official databases
• Financial institutions and other verification providers, with your consent where required
• Information you have given to other Maltech Africa services
• Technical data such as IP address, browser type, device type, pages visited and time on site
• Cookies and similar technologies (see section 11)
We do not knowingly collect information about children. Our services are intended for businesses.
We process personal information only for the following specific purposes:
1. To respond to enquiries and provide quotes
2. To carry out formalization support, verification (KYC/KYB) and compliance checks
3. To produce valuations and verification reports
4. To register and maintain your business in the Veritas Data Pool
5. To build your Credit Readiness Profile
6. To facilitate funding introductions and applications, where you request them
7. To produce aggregated and anonymised impact insights and statistics
8. To meet our legal and regulatory obligations, including record-keeping
9. To send you service communications and, where you consent or are otherwise permitted by law, marketing
10. To secure, maintain and improve our website and services
We process personal information where:
• you have given consent (for example when registering in the Data Pool or joining a mailing list)
• it is necessary to perform a contract with you or to take steps at your request before a contract
• it is required by law
• it protects a legitimate interest of yours, ours or a third party, and does not unreasonably affect your rights
You may withdraw consent at any time. Withdrawal does not affect processing done before withdrawal and may limit the services we can provide.
If you register in the Data Pool:
• We collect and verify business information as described above.
• Only formally registered businesses may register.
• Individual business data is not disclosed to banks, investors, policymakers or other third parties without your explicit, written consent, except where the law requires it.
• We may publish or sell aggregated and anonymised insights, which do not identify you or your business.
• You may ask us to remove your business from the Data Pool. Some information may need to be kept for legal or record-keeping reasons.
We may share personal information with:
• Verification and data providers that help us confirm business and identity details
• Banks, lenders and investors, only where you have asked us to facilitate funding and have consented
• Service providers that host our website, store our data, provide email and communication tools, and process payments, who process information on our behalf under written agreements (operators, under POPIA)
• Professional advisers, such as attorneys and auditors
• Regulators, law enforcement and government bodies where the law requires or permits it
We do not sell your personal information.
Veritas serves businesses in South Africa and Zimbabwe, and some of our service providers may store data outside South Africa. Where we transfer personal information across borders, we do so only in line with POPIA, that is where the recipient is subject to law, binding rules or an agreement that provides adequate protection, or where you consent, or another lawful ground applies.
We take reasonable technical and organisational measures to keep your information secure, including access controls, secure storage and confidentiality obligations for staff and service providers. If we become aware of a security compromise that affects your personal information, we will notify the Information Regulator and affected persons as POPIA requires.
No online system is completely secure. Please protect your own login details and do not send sensitive information by unsecured channels.
We keep personal information only as long as needed for the purposes above, or as long as the law requires. When information is no longer needed, we delete or de-identify it.
Our website uses cookies to make the site work, understand how it is used and improve it. You can change cookie settings in your browser. Disabling some cookies may affect how the site works.
We send marketing messages only where you have opted in, or where the law allows. Every message includes a simple way to unsubscribe. You may also contact us at any time to opt out.
Under POPIA you may:
• ask whether we hold personal information about you and request access to it
• ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained
• object to the processing of your personal information, on reasonable grounds
• withdraw your consent
• object to direct marketing
• lodge a complaint with the Information Regulator
To exercise your rights, email our Information Officer at info@africasmeveritas.org. We may need to verify your identity first. Access requests are also handled in line with our PAIA manual.
If you are unhappy with how we have handled your personal information, please contact our Information Officer first so we can try to resolve it. You also have the right to complain to the Information Regulator (South Africa). Contact details are available at inforegulator.org.za.
We may update this policy from time to time. The current version will always be on this page, with the effective date shown at the top.