Consent and your data
ZarCash asks you for nothing, so this page is not about us. It is about the consent you will be asked for the moment you land on a lender’s application — because that tick-box is the most consequential thing on the page and almost nobody reads it.
What a loan application consent usually covers
- Verifying your identity against the national population register.
- Retrieving or receiving your bank statements, in read-only form, to assess affordability.
- Querying one or more credit bureaux — which is recorded as an enquiry against your record.
- Reporting your account and payment behaviour to the bureaux each month.
- And frequently: sharing your details with other lenders, brokers or marketers. This is the one to read.
The clause that turns one application into months of calls
Consent to share your information with unnamed “partners” or “selected third parties” is how a single application becomes sustained contact from lenders you never approached. It is usually separable from the consent needed to assess you. Look for it, and decline it if the form lets you.
Withdrawing consent
Under POPIA you may withdraw consent for direct marketing at any time, and the organisation must stop. Withdrawing marketing consent does not affect a credit agreement you have already entered into.
You may also ask what personal information an organisation holds about you and require correction of anything inaccurate. If a request is ignored, the Information Regulator takes complaints.
Keep a record of what you consented to and when. If contact later arrives from a company you never dealt with, that record is what identifies where your details came from.
Before you enter your ID number anywhere
Check that the site is a registered credit provider: find the NCRCP number, find the legal entity in the terms, and confirm both in the National Credit Regulator’s register.
Handing a South African ID number and bank details to an unregistered lead-capture page is the beginning of a great many identity fraud cases. The check takes a minute.
Related
Sources and last checked
- Information Regulator — guidance note on direct marketing under POPIA — Regulator guidance, as at 10 August 2026.
- National Credit Regulator — register of credit providers — Regulator, as at 10 August 2026.
Page last checked 10 August 2026. Statutory caps and lender terms change — confirm anything you intend to rely on with the provider or the National Credit Regulator. Found something wrong? Tell us and we will correct it.