Privacy Policy
IN TERMS OF THE PROTECTION OF PERSONAL INFORMATION ACT, 4 OF 2013 ("POPIA")
### 1. Introduction
This Privacy Policy explains how [Your Business Name] ("we," "us," or "our") collects, processes, stores, and discloses personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA"). We are committed to protecting the privacy and security of personal information and ensuring that all data is collected, processed, and disclosed lawfully, fairly, and transparently.
### 2. Purpose of POPIA Compliance
POPIA is designed to safeguard personal information processed by public and private entities while ensuring that such processing is conducted in a lawful, responsible, and secure manner. This policy ensures that we:
- Give effect to the constitutional right to privacy by safeguarding personal information.
- Process personal information lawfully and transparently, subject to justifiable limitations that balance privacy rights with the right of access to information.
- Do not prevent or hinder the performance of any legal duties, functions, or obligations while ensuring compliance with POPIA and any other applicable legislation.
### 3. What Information We Collect
We only collect personal information necessary for providing services as outlined in our service descriptions. This may include:
- **Personal identifiers:** Name, surname, contact details, email address, phone number.
- **Billing and payment information,** where applicable.
- **Information necessary to fulfill** our contractual obligations or comply with legal requirements.
We do not collect unnecessary personal data, and we do not use your information for any purposes other than providing the agreed-upon service.
### 4. How We Use Your Information
We use your personal information for the following purposes:
- To provide and maintain our services.
- To verify your identity where necessary.
- To comply with legal and regulatory requirements.
- To prevent fraud, security breaches, and criminal activity.
- To communicate with you regarding our services.
- To improve our service offerings based on user interactions and feedback.
### 5. How We Share Your Information
We take your privacy seriously and do not sell, rent, or trade your personal information. Your data will only be shared under the following conditions:
- **Service Provision:** Where necessary to deliver our services, we may share relevant personal data with third-party service providers (e.g., payment processors, couriers) who are contractually obligated to handle your data securely and in compliance with POPIA.
- **Legal Compliance:** If required by law, regulation, or legal process (e.g., court orders, subpoenas, or government requests), we will disclose personal information as necessary.
- **Business Operations:** In rare cases, if we undergo a business transaction such as a merger, acquisition, or asset sale, your personal information may be transferred to the new entity, subject to the same privacy protections.
### 6. Your Rights Under POPIA
As a data subject, you have the following rights under POPIA:
- **Right to Access:** You may request a copy of your personal information that we hold.
- **Right to Rectification:** You may request corrections to inaccurate or outdated information.
- **Right to Object to Processing:** You may object to the processing of your data in certain circumstances.
- **Right to Deletion ("Right to be Forgotten")**: You may request the deletion of your data where it is no longer necessary for the purpose collected, subject to legal or regulatory retention obligations.
- **Right to Withdraw Consent:** Where processing is based on consent, you have the right to withdraw your consent at any time.
### 7. Data Retention
We only retain your personal data for as long as necessary to:
- Fulfill the purpose for which it was collected.
- Comply with legal, accounting, or regulatory requirements.
- Resolve disputes and enforce agreements.
Once no longer required, data will be securely deleted or anonymized.
### 8. Security Measures
We take reasonable technical, administrative, and physical measures to protect your personal information from loss, unauthorized access, disclosure, alteration, or destruction. Our security measures include:
- Encryption and secure storage of sensitive data.
- Access controls to ensure only authorized personnel have access to data.
- Regular security reviews and updates to safeguard against emerging threats.
- Secure data disposal methods to ensure that information is permanently destroyed when no longer needed.
In the event of a data breach, we will follow legally required notification procedures and inform affected parties as required under POPIA.
### 9. Third-Party Service Providers ("Operators")
Where we engage third-party service providers (referred to as "operators" under POPIA) to process personal information on our behalf, they are contractually bound to:
- Use the data only for the agreed-upon purpose.
- Implement reasonable security safeguards to protect your personal information.
- Comply with POPIA and any other relevant data protection laws.
### 10. Cross-Border Data Transfers
We do not transfer personal information outside South Africa unless:
- The recipient country has adequate data protection laws in place.
- A legally binding agreement ensures the protection of your data.
- You provide explicit consent for the transfer.
- The transfer is necessary for contract performance (e.g., payment processing).
### 11. Promotion of Access to Information Act ("PAIA") Compliance
In compliance with the Promotion of Access to Information Act, 2 of 2000 (PAIA), we recognize your right to access certain information, subject to reasonable limitations. Requests for access can be made in accordance with our PAIA Manual, which is available upon request.
### 12. Changes to This Policy
We may update this Privacy Policy from time to time in response to changes in legal requirements or operational practices. The latest version will always be available on our website. We encourage you to review this policy periodically.
### 13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or need further information about how we process your data, please contact us: