Who we are
Kreditoversigten.com is operated by AJ Media ApS, Teglholm Allé 9F, 2450 København SV, Denmark, Danish company registration number (CVR) 36993480. In the language of the Protection of Personal Information Act 4 of 2013 (POPIA), AJ Media ApS is the responsible party for the personal information described here. Because we are established in the European Union, the EU General Data Protection Regulation (GDPR) also applies to this processing; where the two laws differ we apply the stricter standard. You can reach us — including our Information Officer — at privacy@kreditoversigten.com or by post at the address above.
What we collect
When you complete the enquiry form on this site, we collect the details you enter: your name, phone number and email address. Alongside the submission we also record:
- the consent record itself — a timestamp plus the exact wording of the consent text you accepted when you submitted the form;
- the page the form was submitted from;
- click and campaign tracking parameters that arrive in the URL:
clickid,source,utm_*andgclid.
We do not collect special personal information as defined in POPIA, we do not knowingly process the personal information of children, and we never ask for your ID number, bank details or banking credentials.
What is stored in your own browser
Two things are stored in your browser's own storage:
- a
localStoragekey calledconsent_v1, holding the choice you made in the cookie consent banner, so you are not asked again on every visit; sessionStorage, holding the click and campaign tracking parameters received in the URL for the length of your browser session.
To be explicit: no analytics or marketing cookies or pixels — including Google Analytics and Meta — are set unless and until you accept them in the consent banner. The default state is deny. Rejecting is as easy as accepting: the banner gives both options equal prominence, and you can change your choice at any time.
Justification for processing
We process the details you submit through the form, and pass them to lender partners, on the basis of your consent — the voluntary, specific and informed expression of will required by section 11(1)(a) of POPIA. Consent is also the basis for analytics and marketing cookies and for electronic marketing. Keeping the site running securely and preventing abuse rests on our legitimate interests under section 11(1)(f) of POPIA (and Article 6(1)(f) GDPR). We collect the information directly from you, for the specific purpose of putting you in touch with lenders, and do not repurpose it.
Who receives your information
We pass your form details only to the lender partners named on this site — the current partner list is shown in the site footer — so that they can contact you about loan offers. Your information is not shared with unnamed third parties, and we do not sell personal information.
We also use the following operators: Supabase, which stores the lead in a database hosted in the EU, and Cloudflare, our hosting and content delivery network (CDN) provider. Each acts under a written agreement, processes the information only on our instructions, and is required to keep it confidential and secure, as section 21 of POPIA requires.
Transfer outside South Africa
Your form details are stored in the EU/EEA, so information collected from South African visitors is transferred out of South Africa to the European Union. Section 72 of POPIA permits this: you consent to the transfer when you submit the form, it is necessary to do what you have asked us to do, and the recipient country is subject to the GDPR, which upholds principles substantially similar to POPIA. Our operators are bound by written agreements imposing the same protections. We do not routinely transfer your information beyond the EU/EEA.
How long we keep it
We keep your form details and the associated consent record for 12 months from collection, after which they are deleted. The exception is information that bookkeeping and accounting law requires us to keep for longer; in that case we retain only what the law requires, and only for the period it requires.
Security safeguards
Form data is transmitted over an encrypted connection (HTTPS), and access to stored information is limited to people who need it for their work. We maintain appropriate, reasonable technical and organisational measures against loss of, damage to, or unauthorised access to personal information, as section 19 of POPIA requires. If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22.
Your rights
You have the right to ask what personal information we hold and receive a copy of it, to have inaccurate or outdated information corrected, to request deletion or destruction, to restrict processing, to object to processing, and to receive your information in a portable form. You may also withdraw your consent at any time, which does not affect the lawfulness of processing carried out before withdrawal. To exercise any of these rights, email privacy@kreditoversigten.com. We respond within one month and may ask you to confirm your identity first. Exercising your rights is free, although a fee prescribed under the Promotion of Access to Information Act may apply to a formal request for copies of records. See also our terms and consent statement.
Complaints and supervisory authority
If you are unhappy with how we handle your personal information, please contact us first so we can put it right. You also have the right to complain to the South African supervisory authority, the Information Regulator (South Africa). Because the responsible party is established in Denmark, our lead supervisory authority in the EU is Datatilsynet (the Danish Data Protection Agency).
Changes to this policy
We may update this privacy policy — for example if the law changes, if our partner list changes, or if the service changes. The current version is always published on this page, and we update the date shown below. Where changes are significant we will say so clearly on the site.
Last updated: 2 September 2026.