Privacy notice

Why information is processed

Information is processed to authenticate users, administer authorised organisations and market participants, capture and route insurance and reinsurance work, support underwriting and claims workflows, meet legal and regulatory duties, prevent fraud, protect the platform, and keep an auditable record of authorised actions.

Information used

Depending on your role and workflow, this can include identity and contact details, organisation and authority information, account and security records, policy and insured-party information, risk locations and exposures, claims and premium records, documents, communications, device and audit data, and consent preferences. Only information relevant to the authorised purpose should be entered.

Lawful, limited use

Processing is limited to an identified operational, contractual, legal, security or legitimate business purpose. Access is role- and participant-scoped. Nexum Flow users must not enter passwords, API keys, or unnecessary personal information into descriptions, notes or analytics prompts.

Portfolio maps show aggregated approximate locations and suppress small cells. Exact addresses are available only in an authorised risk record where they are required for the workflow.

Sharing and service providers

Information may be shared with authorised insurers, brokers, underwriting managers, reinsurers, claims and compliance participants, regulators or law-enforcement bodies when the workflow or law requires it. Approved technology and communication providers may process limited information under contractual, confidentiality and security controls. Any cross-border processing must follow the applicable transfer safeguards.

Analytics and human decisions

Scores, flags, heatmaps and portfolio signals are decision-support indicators. They do not bind cover, decline a risk, determine a claim, or replace authorised professional judgement. Review the cited source records and record the reason for any material decision.

Retention and protection

Records are retained only for the period required by the transaction, applicable insurance and financial-sector obligations, dispute or audit needs, and approved retention schedules. Safeguards include authenticated access, least-privilege roles, participant isolation, encrypted transport, controlled document storage, monitoring and audit trails. No internet service can guarantee absolute security.

Your choices and rights

Subject to applicable law, you may ask whether personal information is held, request access or correction, object to certain processing, request deletion where retention is not required, withdraw consent where consent is the basis, and ask for a material automated outcome to be reviewed by a person.

To make a privacy request, contact support@nexum.sovereignseries.africa. Include enough information to identify the relevant account or record, but do not email passwords or identity documents unless the privacy team provides a secure channel. The request will be routed to the responsible privacy team or Information Officer.

Questions and complaints

Contact the Nexum Flow support address first so the concern can be investigated. You may also lodge a complaint with South Africa's Information Regulator using the current contact details and forms published on its official website.