← Back to BPONitro
DRAFT — not yet legally reviewed. This document is a working draft prepared for internal review. It is not legal advice and must be reviewed and approved by qualified counsel (and any required regulator registrations completed) before you rely on it or present it to customers.

POPIA & PAIA Notice

Last updated: [DATE] · Draft for review

This notice describes how [Legal entity name] complies with the Protection of Personal Information Act, 2013 (POPIA) and the Promotion of Access to Information Act, 2000 (PAIA).

Information Officer

Our registered Information Officer is [name], contactable at [email] / [phone]. The Information Officer is [registered / to be registered] with the Information Regulator of South Africa. (Action required before launch: register the Information Officer with the Regulator and replace this line.)

The eight POPIA conditions

We process personal information in line with POPIA’s conditions for lawful processing: accountability; processing limitation (only what is necessary, with consent or another lawful basis); purpose specification; further-processing limitation; information quality; openness (this notice and our Privacy Policy); security safeguards; and data-subject participation (your access, correction, and deletion rights).

Your rights as a data subject

  • To be told what personal information we hold and to access it.
  • To request correction or deletion of your personal information.
  • To object to processing and to withdraw consent.
  • To complain to the Information Regulator (POPIAComplaints@inforegulator.org.za).

PAIA — access to records

Our PAIA manual describes the records we hold and how to request access. [Link to PAIA manual — action required before launch: publish the PAIA manual and link it here.] Requests may be sent to the Information Officer above.

Direct marketing

We only send you electronic marketing where the law allows and you have not opted out. Every marketing message includes an unsubscribe option.