***** and Leaking if information

A few days after joining gym company and gave my details to Neo ( I never give out my personal information ever and this was the only time I did) ***** started being commuted using my information, had account being open under using my ID number and account number, bare in mind I do not have any credit under my name and all of a sudden after giving this gym my information contracts are being open with different institutes, the POPI act was not followed when doing confirmation I don't think one is allowed to call out all you personal information without having you confirm anything, my ID number, Address, Account number was called out on a call without them even being sure they're speaking to the correct person ... This is the Gym Company in Flora Center.