Privacy Policy

Investment Corporation of South Africa (Pty) Ltd ("ICSA", "we", "us" or "our") respects the privacy of persons who visit our website or communicate with us. This Privacy Policy explains how we collect, use, protect and manage personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

The responsible party for personal information processed through this website is:

Investment Corporation of South Africa (Pty) Ltd
Registration No. 2020/913039/07

Registered Office:
563 Shongwe Street
Twala Section
Katlehong
Gauteng
1431
South Africa

Privacy enquiries: privacy@icsa.africa

This Privacy Policy applies to personal information processed through the ICSA website and through communications initiated through the website.

It does not govern the independent privacy practices of third-party websites, social-media platforms or services that may be linked from this website.

Depending on how you interact with ICSA, we may collect your name, email address, the subject and contents of an enquiry or message, information that you voluntarily provide when communicating with us, and limited technical information generated through the normal operation and security of the website where applicable.

Please do not submit passwords, banking credentials or other highly sensitive information through the website contact form unless specifically requested through an appropriate secure channel.

We may collect personal information directly from you when you submit the website contact form, email or otherwise communicate with ICSA, or voluntarily provide information in connection with an enquiry or business communication.

We aim to collect only information reasonably necessary for the purpose for which it is required.

ICSA may process personal information where permitted under POPIA for purposes including responding to enquiries and communications; considering potential business, investment or partnership opportunities; administering and securing the website; maintaining appropriate business records; complying with legal and regulatory obligations; and protecting ICSA's legitimate legal or business interests where permitted by law.

Personal information will not be processed in a manner incompatible with the purpose for which it was collected unless permitted by law.

ICSA may use service providers that assist with website hosting, cloud infrastructure, email delivery, form processing, security or related technology services.

Where a service provider processes personal information on ICSA's behalf, ICSA will take reasonable steps to ensure that the information is processed appropriately and protected in accordance with applicable law.

ICSA may also disclose personal information where required or authorised by law, necessary to protect ICSA's rights or legitimate interests, required by a competent regulatory, judicial or governmental authority, or authorised by you.

ICSA does not sell personal information.

Some technology or service providers used by ICSA may operate or process information outside South Africa.

Where personal information is transferred outside South Africa, ICSA will take reasonable steps to ensure that the transfer is permitted under POPIA and that appropriate protection is provided.

ICSA will retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for a longer period where retention is required or permitted by law.

When personal information is no longer required, ICSA will take reasonable steps to delete, destroy or de-identify it, subject to applicable legal or record-keeping requirements.

ICSA takes reasonable and appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access, interference, misuse, alteration or disclosure.

These measures may include identifying reasonably foreseeable risks, implementing safeguards against those risks, reviewing whether safeguards remain effective and updating security measures as circumstances change.

No internet-based system can guarantee absolute security, but ICSA will maintain safeguards appropriate to the nature of the personal information under its control.

If ICSA has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, ICSA will take the steps required under applicable law.

Where required by POPIA, this includes notifying the Information Regulator and affected data subjects as soon as reasonably possible, subject to lawful exceptions.

Subject to POPIA and other applicable law, you may have the right to ask whether ICSA holds personal information about you; request access to your personal information; request correction or updating of inaccurate information; request deletion or destruction where legally applicable; object to certain processing; withdraw consent where processing is based on consent; and lodge a complaint with the Information Regulator.

To exercise a privacy right or submit a privacy enquiry, contact privacy@icsa.africa.

We may request reasonable proof of identity before acting on a request in order to protect personal information from unauthorised disclosure.

If you believe that your personal information has been processed in a manner that infringes POPIA, you may lodge a complaint with the Information Regulator (South Africa).

ICSA encourages you to contact us first at privacy@icsa.africa so that we have an opportunity to address your concern.

ICSA does not currently use non-essential advertising or analytics cookies on this website.

The website or its infrastructure may nevertheless use technologies that are technically necessary for security, network operation or delivery of website functionality.

If ICSA introduces analytics, advertising or other non-essential tracking technologies in future, this Privacy Policy and any applicable consent mechanisms will be updated as required.

The ICSA website may contain links to third-party websites and platforms, including social-media services.

Those third parties operate independently and have their own privacy practices and policies. ICSA is not responsible for the privacy practices, security or content of third-party websites.

Information Officer: Katlego Zwane

Information Regulator registration reference: 2025-062511

Email: privacy@icsa.africa

Investment Corporation of South Africa (Pty) Ltd
563 Shongwe Street
Twala Section
Katlehong
Gauteng
1431
South Africa

ICSA may amend this Privacy Policy from time to time to reflect changes in its operations, technology, legal obligations or privacy practices.

The current version will be published on this website together with its effective or last-updated date.