Customer Consent Policy

CUSTOMER CONSENT TO PROCESS PERSONAL INFORMATION

By using or continuing to use their Tarsus account or conducting business with a member of the Tarsus group of companies (“Tarsus”), the customer (“Customer”) accepts and agrees to Tarsus processing, as set out herein, Personal Information (“PI”) supplied to, held or collected or Processed by any member of the Tarsus, whether the PI was or is obtained previously, now or in the future.

A. GENERAL

Tarsus has committed to protecting the Customers PI and to complying with the Protection of Personal Information Act 4 of 2013 (“POPI”) and all other applicable legislation.
For purposes hereof the terms “Personal Information” (or PI) and “Processing” have the meanings given in POPI. “Process” and “Processed” shall be defined with reference to Processing.
It is a condition of any member of the Tarsus group of companies opening an account for or trading with any Customer, that the Customer provides the consents referred to herein for so long as the account remains open or orders are placed on Tarsus. This consent will be deemed to have been given if the Customer submits an account application to Tarsus or purchases or places any order for goods or services on Tarsus.
Tarsus consists of Tarsus Technology Group (Pty) Ltd and its subsidiaries including but not limited to Tarsus Distribution (Pty) Ltd, Tarsus on Demand (Pty) Ltd, Tarsus Shared Services (Pty) Ltd. “Tarsus” refers to each and to all of these companies.
PI is collected from the Customer, the Customers interaction and trading activities with Tarsus, credit bureaus or credit insurers and may also be supplied by vendors whose goods and services are sold by Tarsus. Where the Customer provides Tarsus with any information of a third party, such as to allow delivery of goods, the Customer is responsible for and warrants that the information is provided with the appropriate consent of the third party.
The PI that Tarsus may process includes the information and data referred to in this consent and includes: names, addresses, contact details, ordering and purchasing history and information and patterns, financial information, details (PI) of persons providing security and persons representing the Customer in dealings with Tarsus, credit limits, account defaults, company structures and information required by credit bureau’s and credit insurers to identify the Customer and assess risk.
PI is Processed mainly in South Africa but may be processed outside of South Africa, subject to Part E hereof. PI is processed and stored on secure access controlled servers and premises and save as set out herein is accessible only by staff of Tarsus. Tarsus will keep PI confidential, accurate and complete.
The Customer hereby consents to Tarsus Processing and continuing to Process the Customers PI for the purposes and as set out herein. This consent is provided voluntarily and expressly.

B. USE OF PERSONAL INFORMATION

Tarsus may retain and process the Customers PI for any or all of the purposes mentioned in this consent, for so long as reasonably required or lawfully entitled, including but not limited to: 9.1. opening, managing and maintaining an account with Tarsus, assessing credit worthiness andappropriate credit terms and limits, obtaining credit insurance, establishing and verifying the Customers identity and any information given to Tarsus, including PI, and re-verifying and reassessing the aforegoing from time to time;
processing any orders or complying with contractual obligations to the Customer or the vendor of the goods or services and enforcing any right of Tarsus including the collection of any amounts;
storing and backing up all PI;
in the event that the Customer’s account or credit application is unsuccessful or credit is withdrawn, Tarsus may use PI to re-check the Customers credit record at a later stage and from time to time enable Tarsus to contact the Customer with an offer to open a Tarsus account again or take up credit;
enabling Tarsus to detect and report fraud and / or any criminal activities and to take the necessary measures to prevent any suspicious or fraudulent activity on the Customers Tarsus account;
processing the Customer’s orders or purchasing information, trends and online browsing behaviour (where the Customer has consented to such tracking on a Tarsus website, mobile website or apps or in a software license) for any or all of the following purposes: market and product analysis; Customer analysis; monitoring the Customer’s buying patterns, or using credit bureau data to enrich the Customers profile to enable Tarsus to improve or customise its personalised marketing offers to the Customer and generating statistical and research reports for Tarsus account use or where a Vendor requires it. Should Tarsus produce such research or statistical reports for external use, these reports will not contain any PI that identifies the Customer;
providing the vendor of the goods or services with information that they require to: verify the purchaser of their goods or services, ascertain details of the goods or services sold or used; analyse product performance or purchasing behaviour or trends; assess license compliance and / or compliance with the vendors territorial or resale or other requirements; or assess Tarsus compliance with the vendors distribution terms;
communicating within the Tarsus group of companies to process orders, generate invoices – finances across the Tarsus group are centralised, capture transactions and payments and to consider and assess and communicate value added propositions within the Tarsus group to the Customer;
communicating with the Customer on account matters, orders, offers, queries and for purposes of identifying and marketing of products within the Tarsus group that Tarsus believes may be of interest to the Customer;
without limiting the aforegoing the Customer consents to Tarsus sharing it’s PI with and using it’s PI as and when required for undertaking credit and previous payment performance checks and credit insurance. This may involve sharing PI with and obtaining PI from: registered credit bureau(x), credit insurance companies, the South African Credit and Risk Reporting Association (SACCRA), any organisation representing credit bureau(x), any suppliers, the Department of Home Affairs and other sources from time to time. In this regard:
Tarsus will share with credit bureau(x) and credit insurers, information concerning the Customer’s account and credit application, the Standard Terms and conditions of trade, credit limits, trading and payment patterns and defaults, this consent and the termination thereof as well as information about the Customers Tarsus account and any noncompliances;
The Customer acknowledges that the credit bureau(x) will provide Tarsus with a credit profile and possibly a credit score on the Customers credit worthiness. The Customer has the right to contact such credit bureau(x), to have the credit record(s) disclosed and to correct any inaccurate information. The Customer acknowledges that Tarsus may also utilise alternative profile information such as: historical cash purchase behaviour at Tarsus, educational qualifications, household structure data, mobile device data, geographical data and / or property ownership when assessing an account or credit application;
Tarsus may share any transaction details of any purchases from a Tarsus company and any credit or account performance and details of any defaults within the Tarsus group; 9.10.4. The Customer consents to other suppliers and credit bureau(x) and credit insurers, sharing with Tarsus, positive and negative information (which may be PI) about the Customer and its trading with Tarsus, including any non-compliances, and to Tarsus sharing, on request such information with them;
Tarsus may share PI with payment processing service providers, merchants and banks and other persons that assist with the processing of the Customers payment instructions, as well as with law enforcement and fraud prevention agencies and other persons tasked with the prevention and prosecution of crime, including the SAFPS (the South African Fraud Prevention Services) to prevent futuristic identity fraud; Regulatory authorities, industry ombudsmen, governmental departments, local and international tax authorities and other persons that Tarsus is, in accordance with applicable laws, required to share the Customers PI with;
PI may also be shared with Tarsus’ service providers, agents and sub-contractors that have been contracted by Tarsus, including Attorneys and Debt Collecting agencies; persons to whom Tarsus cedes its rights or delegates its authority to in terms of this consent or any Terms and Conditions, without the Customers consent and without notice. Tarsus may sell the Customers account to third parties in the event of default. In such an event the third party will then process the PI.

C. CUSTOMERS RIGHTS

The Customer has the rights given under POPI, which includes:

the right to access the Customers PI held by Tarsus, during office hours within a reasonable time after we have received such a written request for access. A request to access PI and/or to lodge a complaint may be emailed to popia@tarsus.co.za;
the right to request Tarsus to correct, amend or delete PI that is inaccurate, irrelevant, excessive, out of date, incomplete, no longer required, misleading or contended to have been obtained unlawfully;
the right to object to the Processing or further Processing of PI at any time – i.e. to withdraw this consent;
the right to lodge a complaint with the Information Regulator on complaints.IR@justice.gov.za or for general enquiries on inforeg@justice.gov.za

D. CONSEQUENCES OF A REFUSAL TO GIVE CONSENT OR A CONSENT WITHDRAWAL

If consent to Process PI is not given or is withdrawn at any time or consent to changes to this consent agreement is rejected or refused, then Tarsus may, without claim from the Customer: 11.1. refuse to process any further order and / or cancel any pending orders;
decline to open, continue or extend an account or further credit to the Customer;
Where consent to Process PI is not given or is withdrawn then all accounts and credit facilities extended to the Customer may be withdrawn by Tarsus and in such event all amounts then outstanding shall be and automatically become fully due, owing and payable to Tarsus.

E. CROSS BORDER CONSENT

Where necessary, PI may be shared with the vendors of goods and services supplied to Tarsus and may be Processed and backed up. This may require the transfer of PI outside of South Africa.
The Customer consents to the transfer and processing of PI outside of South Africa for the purposes of storage, back-ups and sharing with vendors for the purposes in this consent.
Tarsus agrees that PI will not be transferred outside of South Africa unless it is to be transferred to a country which subscribes to similar data protection laws to South Africa. Where the recipient is in a country that does not subscribe to similar data protection laws, Tarsus will enter into an agreement with such entity in terms whereof such entity will be liable to ensure the adequate protection of the Customers PI.

F. CHANGES AND ASSOCIATED COMPANIES

Tarsus reserves the right to amend these terms of consent from time to time by publishing them on its website and such changes shall apply within 7 days of publication unless the customer objects. Clause 11 and 12 above apply hereto.
Where the Customer allows any other entity to purchase on its account, the Customer warrants that it can and does bind and has bound that entity to these consent terms.
Tarsus will comply with it’s Privacy Policy, available on it’s website, as published and updated from time to time.

Download our PAIA Manual Here.