1. Introduction

The Chemical Industries National Provident Fund (“CINPF”, “the Fund”, “we”, “us”) is committed to protecting the privacy and personal information of its members, beneficiaries, service providers, and website users.

This Privacy Policy explains how we lawfully collect, use, store, share, and protect personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

2. Responsible Party

For purposes of POPIA, CINPF is the Responsible Party in respect of personal information processed through its digital platforms.

3. Personal Information We Collect

3.1 Standard Personal Information

• Full name, ID or passport number
• Date of birth and gender
• Contact details (email, phone, address)
• Employment and contribution information
• Banking and payment details

3.2 Special Personal Information

Where necessary and permitted by law, we may process:

• Health or medical information
• Biometric data
• Racial or demographic information (for statutory reporting)

4. Purpose of Processing

Personal information is processed strictly for lawful fund-related purposes, including:

• Administration of retirement fund benefits
• Member authentication and account access
• Compliance with the Pension Funds Act, FICA, FAIS, tax, and regulatory obligations
• Communication with members and beneficiaries
• Fraud prevention, security, and audit purposes

5. Lawful Basis for Processing

We process personal information in terms of POPIA on the basis of legal and contractual obligations, consent (where required), legitimate interests of the Fund, and statutory duties imposed by law.

6. Sharing of Personal Information

Personal information may be shared only where necessary with:

• The Fund Administrator: Momentum Metropolitan Holdings Limited or affiliates
• Regulators: Such as FSCA, SARS, and the Pension Funds Adjudicator
• Professional Advisers: Auditors, actuaries, and legal advisers
• Service Providers: IT and hosting providers acting as POPIA Operators

All third parties are contractually bound to confidentiality and data protection obligations.

7. Single Sign-On & Administrator Platforms

8. Data Security

CINPF implements appropriate technical and organisational safeguards including encryption and role-based access controls. Despite these measures, no electronic system is completely secure; CINPF cannot guarantee absolute security against unlawful access beyond its reasonable control.

9. Data Retention

Personal information is retained only for as long as necessary to fulfil fund administration and legal obligations. Thereafter, data is securely destroyed or anonymised.

10. Data Subject Rights

You have the right to access your personal information, request correction or deletion, object to processing on reasonable grounds, withdraw consent, and lodge a complaint with the Information Regulator.

11. Cross-Border Data Transfers

Where data is stored outside South Africa, CINPF ensures that the receiving country provides adequate protection or that binding agreements ensure POPIA-equivalent safeguards.

12. Cookies & Digital Tracking

The CINPF website may use cookies to improve functionality. You may disable cookies in your browser; however, some functionality may be affected.

13. Changes to This Policy

This Privacy Policy may be updated periodically. The latest version will always be published on the CINPF website.

14. Contact & Complaints