BackedSure

Privacy Policy

How BackedSure collects, uses, stores and protects personal information under POPIA.

Last updated: 4 September 2026

BackedSure is a division of Covered Financial Services, an authorised Financial Services Provider, FSP number 54871. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, request an insurance quote, submit a proposal form, contact us, create an account, lodge a claim or otherwise use our services.

We process personal information in accordance with the Protection of Personal Information Act, 2013, the Financial Advisory and Intermediary Services Act, 2002, applicable insurance legislation and other laws that apply to our business.

Who Is Responsible For Your Information

Covered Financial Services is the responsible party for personal information processed through BackedSure, except where an insurer, underwriting manager, administrator, payment provider or other authorised third party acts as an independent responsible party for its own regulatory or contractual purposes.

Questions about privacy or data subject rights can be sent to hello@backedsure.co.za. You can also contact us on +27 83 575 6352.

Information We Collect

  • Identity and contact details, including your name, ID or registration details, role, email address, telephone number and business address.
  • Business and professional information, including your profession, services, licence details, turnover, fee income, locations, client profile, industry memberships, employees, subcontractors and risk management practices.
  • Insurance information, including existing cover, policy history, claims history, loss circumstances, desired limits, deductibles, underwriting responses and supporting documents.
  • Financial and transaction information, including premium amounts, payment status, invoice details and billing records where relevant.
  • Account and platform information, including login identifiers, submitted forms, saved applications, uploaded documents and dashboard activity.
  • Communications with us, including emails, calls, contact forms, complaints, claim notifications and records of advice or service interactions.
  • Technical information, including IP address, browser, device type, pages visited, referral source, session information, approximate location and cookie data.

How We Collect Information

  • Directly from you when you complete forms, request quotes, send documents, contact us or use the platform.
  • From your business, employer, representatives, brokers, advisers, directors, members, partners or authorised users.
  • From insurers, underwriting managers, administrators, loss adjusters, claims handlers, compliance providers and other parties involved in arranging or administering cover.
  • From public sources, regulatory registers, professional bodies, sanctions databases, credit or fraud prevention sources where lawful and relevant.
  • Automatically through website analytics, logs and cookies.

Why We Use Personal Information

  • To respond to enquiries and provide information about insurance products.
  • To assess your needs and collect information needed for quotation, underwriting, policy placement, policy administration and renewal.
  • To submit applications to insurers, underwriting managers or administrators and obtain terms, declines, referrals or other underwriting outcomes.
  • To provide intermediary services, keep records of services rendered and comply with FAIS duties.
  • To administer claims, complaints, policy changes, cancellations, refunds and customer support requests.
  • To verify identity, prevent fraud, manage sanctions and anti-money-laundering risks, and protect the platform.
  • To operate, maintain, secure and improve the website, quote engine, forms, email systems and customer dashboard.
  • To send service messages, quote updates, renewal reminders, compliance notices and other communications related to your relationship with us.
  • To send marketing only where permitted by law or where you have consented, and to allow you to opt out of direct marketing.
  • To comply with legal, regulatory, audit, tax, accounting, dispute resolution and reporting obligations.

Legal Grounds For Processing

We process personal information where it is necessary to perform a contract or take steps before entering into a contract, where you have consented, where processing is required by law, where processing protects a legitimate interest of you or BackedSure, or where processing is necessary for the proper performance of a public law duty by a regulator or authorised body.

Special Personal Information And Children

We do not intentionally collect special personal information or personal information of children unless it is necessary for a specific insurance, claim, complaint, legal or regulatory purpose and the processing is permitted by law. If you provide information about another person, you must have authority to do so and must make this policy available to that person where practical.

Sharing Personal Information

  • Insurers, underwriting managers, reinsurers, administrators and binder holders.
  • Claims handlers, assessors, loss adjusters, legal advisers, investigators and dispute resolution bodies.
  • Compliance officers, auditors, accountants, professional advisers and regulators, including the FSCA, Information Regulator and Ombud schemes where applicable.
  • Technology providers used for hosting, storage, forms, email, analytics, security, CRM, document generation, payment and customer support.
  • Your authorised representatives, business contacts, broker, adviser, employer or other persons you ask us to deal with.
  • Law enforcement, courts, government bodies or third parties where disclosure is required or permitted by law.

We require service providers who process personal information for us to protect it and use it only for authorised purposes.

Cross-Border Transfers

Some systems, insurers, reinsurers or service providers may process information outside South Africa. Where personal information is transferred cross-border, we take reasonable steps to ensure the recipient is subject to appropriate privacy, confidentiality and security obligations, or that another lawful basis for the transfer applies.

Cookies And Analytics

We may use cookies, pixels, logs and similar technologies to keep the website working, remember preferences, secure sessions, measure performance and understand how visitors use our services. You can usually disable cookies in your browser, but some parts of the website may not work properly without them.

Security

We use reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, misuse, alteration or disclosure. These safeguards may include access controls, secure hosting, encryption in transit, least-privilege permissions, monitoring, backups and staff or service-provider confidentiality controls.

Retention

We keep personal information only for as long as needed for the purpose for which it was collected, for a lawful related purpose, for insurance and claims administration, or to meet legal, regulatory, tax, accounting, audit and dispute resolution requirements. When information is no longer required, we will delete, destroy or de-identify it where practical.

Your Rights

  • Ask whether we hold personal information about you and request access to it.
  • Ask us to correct, update or delete inaccurate, irrelevant, excessive, outdated or unlawfully obtained personal information.
  • Object to processing where POPIA allows an objection.
  • Withdraw consent where processing is based on consent, without affecting earlier lawful processing.
  • Opt out of direct marketing.
  • Complain to us or to the Information Regulator if you believe your privacy rights have been infringed.

To exercise these rights, email hello@backedsure.co.za. We may need to verify your identity and may refuse or limit a request where the law allows or requires us to do so.

Security Compromises

If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will assess the incident and notify affected data subjects and the Information Regulator where required by POPIA.

Changes To This Policy

We may update this Privacy Policy from time to time. The latest version published on this website applies from the updated date shown on the page.

Get a Quote