Security, Insurance and Privacy
How does Knox protect my privacy and personal information?
The short answer
Your personal information is protected by the Protection of Personal Information Act (POPIA), which requires Knox to collect only what it needs for a lawful purpose, keep it secure, limit who can see it and let you access or correct it. Some information, such as identity documents, must be collected by law for verification. The personal records Knox keeps are separate from what you store in your box.
What POPIA requires of a business like Knox
POPIA sets conditions for processing personal information. In plain terms, a business must have a lawful reason to collect information, use it for that purpose, keep it accurate, protect it with reasonable security measures and not keep it longer than necessary unless the law requires it to. Each business must also have an Information Officer responsible for compliance.Why some information must be collected
Businesses that deal in bullion, provide credit or offer custody services may have legal duties to identify and verify their clients and to keep certain records, including under the Financial Intelligence Centre Act. That is why identity documents are requested and, in some cases, proof of address or other verification. Individuals need a copy of their ID or passport and proof of residential address dated within the last 3 months (such as a utility bill). Companies need their registration documents, VAT number if registered, and ID and proof of address for directors and shareholders holding more than 25%. Trusts need the letters of authority and trust deed, with ID and proof of address for trustees and beneficiaries. Knox may also ask for an income tax number and, for bullion purchases, a source-of-funds declaration.Biometric and access information
Under POPIA, biometric information is special personal information, which carries stricter conditions. If facial recognition or other biometric checks are used for access, you are entitled to know what is captured, how it is stored, who can use it and how it is deleted when it is no longer needed. You are enrolled on the facial-recognition system on your first visit. Biometric information (such as facial recognition, fingerprints and photographs or video) is used only to verify identity and secure the premises, is stored on secure servers that may be located in South Africa, the United Kingdom, the European Union or the United States, and is kept only for as long as it is needed or the law requires. You can ask to access, correct or delete your information by emailing compliance@knox.co.za.Your rights and how to use them
- Ask what personal information is held about you.
- Ask for incorrect information to be corrected.
- Object to certain types of processing, such as direct marketing.
- Complain to the Information Regulator if you believe your information has been mishandled.
Discretion about your box and your visits
Privacy also matters in practice. Staff should not discuss clients or their visits with anyone who is not entitled to know, and information should be shared only with people who have a lawful reason to receive it, such as authorised users you nominate, service providers bound by confidentiality, or authorities acting under the law.How Knox handles this
Knox collects the identity and contact information it needs to verify clients, manage agreements and meet its legal obligations, and restricts access to that information within the business. Knox can explain what it collects for your service, why it is needed and how long it is kept. Requests to access or correct your information, and privacy complaints, can be directed to Knox's Information Officer.
Ready for the next step?
Speak to the Knox team about your situation. They will confirm current pricing, availability and requirements before you decide.
