Unauthorized payments, Lying staff members, Breaching of the POPI Act

In 2017, I tried transferring a contract into my name. I was declined as ITC was pulling through 2 ITC profiles under my ID, 1 under my ****en surname and 1 under my married surname. I called Transunion and rectified that the only profile that should exist is the ITC profile under my marriage surname. I was advised a once off R40 would be deducted from my account, I agreed. An updated ITC check was sent to the Vodacom shop in Centurion Mall and all was well.

Except for the past 2 years on a monthly bases, Transunion had been **********ly deducting R40 from my account. Something I had never agreed to.

Beginning of June 2019 I called to put a stop to the unauthorized debit. The consultant over the phone wouldn't assist me, because I apparently failed an ID check - due to the email address on Transunions file was different from the one I had been using for the past 4 years. My email had not changed, Transunion had the wrong email all along. Sending my personal information (which is a breach of privacy and against the POPI Act) to an email address of a stranger. The consultant first wouldn't assist me until I asked to speak to a manager. She then went as far as to lie to me that it had been canceled and no more debits would take place. This month, another debit went off.

Transunion should remove this debit from my account and refund the unauthorized payment taken.