Privacy policy
Your information is personal. This explains what we need, how we use it and the choices you have.
Effective date: 25 October 2026 · Version 1.0
The operator’s verified business and processing details will be published here before checkout opens. You can use the free guidance in the meantime.
01. Who is responsible for your information
UIFAssist is the trading name of Available before purchases open, Available before purchases open. Our business address is Available before purchases open. Our Information Officer is Available before purchases open. Contact the privacy enquiry option on our Contact page about your information or use the privacy enquiry option on our Contact page.
This notice covers UIFAssist.com, your UIFAssist profile, purchases and our maternity claim assistance. UIF, uFiling, your employer, bank and other independent organisations have their own privacy notices.
02. What we collect
For an account, we collect your name, email address, contact number and account security information. Your password is handled by our authentication provider. We do not ask for your banking password, card PIN, uFiling password or one-time codes.
If you buy a review or submission service, we collect only the claim details and documents needed for that work. These may include identity documents, employment and salary records, bank confirmation, leave dates, pregnancy or birth confirmation, your instructions, review notes and official correspondence. Some documents may contain medical information or information about your child.
We keep your order, payment reference, service selection, consent records and correspondence. Payfast processes your payment details on its own payment page. UIFAssist does not store your full card number or card security code.
03. Why we use it
We use account and order information to provide the service you request, deliver your downloads, check payment, communicate with you and keep accurate business records. We use limited technical information to prevent abuse, investigate errors and protect accounts.
For a review, we use your documents to identify missing information and inconsistencies. For an authorised submission, we use the agreed documents to prepare and send your claim through a permitted official channel and to record follow-up information. We do not determine your UIF entitlement or make the government decision.
You can browse our public information without creating an account. You can buy a sample pack without uploading medical or claim documents. Information required for a purchased service is identified when requested. If you do not provide it, we may be unable to complete that part of the service.
04. Our grounds for processing
We use the information needed to enter into and perform your service agreement, comply with applicable recordkeeping obligations and pursue legitimate security or dispute-management purposes where lawful. We use consent for optional analytics and for sensitive information where consent is the appropriate authorisation.
We explain any new purpose before using your information for that purpose and obtain further permission where required. We do not sell your personal information or use claim documents for advertising.
05. Pregnancy, medical and child information
Pregnancy and medical records require extra care. Before you upload these documents, we request specific permission to use the relevant health information for the claim service you choose. Please send only the requested pages and do not include unrelated medical history.
If a required document contains information about your child, the person providing it must be legally entitled to give permission for the child. We request that permission separately. Our service does not invite children to create their own accounts.
You may withdraw consent by contacting our Information Officer. Withdrawal does not undo processing already lawfully completed. We will explain any work we can no longer perform and any limited records that must remain for a lawful reason.
06. Where information comes from
Most information comes directly from you. With your instruction or another lawful basis, relevant information may come from your employer, an authorised representative or an official response about your claim. We do not collect your private documents by searching unrelated accounts.
Please tell us when an employment date, payment, banking detail or other claim fact changes. Incorrect information can delay a claim or affect an official decision.
07. Who can receive your information
Authorised UIFAssist staff and service providers can access only what they need for their work. Our technology providers support hosting, authentication, private document storage, payment processing and email delivery. They are required to handle information under appropriate contractual and security arrangements.
For the submit-on-behalf service, we disclose the relevant claim information to UIF or the Department of Employment and Labour under your mandate and the accepted submission process. We may contact an employer or other source only within your instructions or another lawful basis. We may also disclose information when lawfully required, to handle a complaint or to protect legal rights.
Our current website technology includes Vercel for hosting, Supabase for authentication and storage, Payfast for payments and Resend for email. Google Analytics is optional and loads only with your analytics choice on public information pages. We do not include your claim documents in contact email notifications.
08. Processing outside South Africa
Some technology providers may process information outside South Africa. Our configured data locations and relevant provider countries are being verified before private service enrolment opens. Before permitting a transfer, we assess the protection and applicable POPIA transfer requirements and use appropriate agreements or another lawful ground.
Special health information and children's information may require additional safeguards or prior regulatory authorisation in some circumstances. Contact our Information Officer for information about the safeguards applying to your records.
09. How long we keep it
We keep information for the purpose for which it was collected and any justified legal or dispute period. Our normal schedule is claim document files are scheduled for deletion 90 days after case closure or after 12 months of case inactivity, whichever occurs first. Account details remain while the account is open. Payment and tax records are normally retained for five years, subject to the applicable legal period. Contact enquiries are normally retained for 12 months and security access logs for 12 months. Account deletion and any legal holds are reviewed by the Information Officer. A longer hold is limited to records needed for a specific legal obligation or active dispute.
Closing your account does not necessarily erase an invoice or an existing legal hold. Claim documents are treated separately from financial records. When retention ends, records are securely removed or de-identified. Backup copies expire under the provider's documented backup cycle and are not used for ordinary business access.
10. Account and document protection
We use access controls, private document storage, protected connections and additional sign-in verification for sensitive areas. Access is limited to the account owner and authorised staff. We monitor relevant security events and review permissions.
No online service can promise that a security incident is impossible. Keep your sign-in details private, use a strong unique password, complete your additional sign-in verification and sign out on a shared device. Tell us promptly if you think your account has been accessed by someone else.
11. Cookies and analytics
Essential session and security cookies help you sign in and keep your account protected. A preference record remembers your cookie choice. These functions are needed for the relevant service.
Optional Google Analytics helps us understand use of our public information pages. It stays off until you choose to allow analytics. You can reject it or change your choice through Cookie settings. Rejecting analytics does not prevent purchases or claim assistance.
We do not send claim documents, identity numbers, banking details, form answers or private account page activity to Google Analytics. We do not use advertising cookies or behavioural advertising on this service.
12. Your choices and rights
You can ask whether we hold your information, request access, correct an inaccurate record, and request deletion or restriction where applicable. You may object to processing on applicable grounds, withdraw consent and complain to the Information Regulator.
Contact the privacy enquiry option on our Contact page or choose Privacy or refund on the Contact page. We will verify your identity in a proportionate way before releasing or changing private records. We will explain the outcome, any lawful refusal and any prescribed fee that applies before charging it. Please do not put an identity document in a general contact message.
If you need formal access to records, our PAIA manual at available from the Information Officer before purchases open explains the procedure. Your legal rights remain available even if your account is closed.
13. Messages and marketing
We send the account, payment and service messages needed to deal with your request. These are separate from marketing. Buying a package does not enrol you in a marketing list.
If we offer optional marketing in future, we will ask for the required permission and provide a clear way to stop it.
14. If a security incident occurs
We will investigate, contain the incident and take appropriate action. Where notification is required, we will inform the Information Regulator and affected people as soon as reasonably possible in accordance with POPIA, including information that helps affected people protect themselves.
15. Complaints and changes
Please contact our Information Officer if you are concerned about your information. You may also contact the Information Regulator directly through https://inforegulator.org.za/complaints/ or POPIAComplaints@inforegulator.org.za.
We may update this notice when our service or obligations change. The current version and review date appear on this page. Material changes affecting an active service will be brought to your attention where appropriate.