RCS does not follow POPI act and share personal information of customers over the phone

I recently purchased a phone from Edgars (now managed by RCS). After having concluded the transaction and leaving the store, I receive a call - (several hours later) informing me that my Edgars card / account had been blocked by RCS. (Apparently they could not reach me at the time of the transaction and proceeded to block my card without my consent or having consulted me). Since when do I need their permission to use my storecard - I am well within my credit limit and my account had been dormant - paid up in full for months?

Secondly, in order to reinstate my card they wanted me to contact their ***** line. When I called the ***** line (I was fuming) because my card had been blocked, I am asked to answer a number of security questions. The operator continues to recite my personal information such as details on properties I own; bank details etc,back to me. I never agreed to share this information with Edgars at the time I opened the account nor did I do so when RCS took over the account. RCS are clearly in violation of the POPI act, and surely cannot abuse their privileges as financial services provider to access peoples personal information without their consent? I phoned them, so they have no way of confirming I am who I say I am, but read back my personal details.... RCS claim they blocked my card to prevent *****, but they are the ones prompting ***** by unwittingly sharing peoples banking and personal details over the phone

Finally the people I interacted with are not able to provide any answer to the procedures they need to follow. I aked to speak to a manager, and was told they were in a meeting. I am still waiting for a callback from the ***** department. RCS complaints line phoned to acknowledge my complaint but have offered no solution.