Violation of the Popia Act

We were clients of VR Security Bloemfontein for five years and they SOLD VR Vaal to CB Security Vereeniging without letting any of us know no letters no email. They gave CB Security all of our personal Information including our banking details. One day before the debit order was supposed to go off we found out VR Vaal was sold and all our debit orders went off under CB Security!!!! We never signed a contract with CB our contract was with VR. This is violation of the Popia Act. No one's personal information can be sold to a 3rd party without the persons consent!!! When we queried this they told us it was company acquisition!!! I phoned VR Bloemfontein and still waiting for the call back I blame both Companies for not letting us know timeously about this take over!! They VR Vaal can not assume that we will all go with CB?? We were not given a choice it was just assumed that we would. I need answers to these questions and nobody is coming back! A Popia Violation you can get a fine up to R10 million fine.