Legal POPIA Notice

LEGAL POPIA NOTICE

This POPIA Notice is issued by Responsible Party: with registered address: and contact email: . The individual to whom personal information relates (the Data Subject) is: ID/Passport No.: . Effective Date of this Notice: .

RECITALS

WHEREAS the Responsible Party collects, stores and processes certain personal information relating to the Data Subject for legitimate business purposes and to fulfil contractual and legal obligations under applicable data protection law, including the Protection of Personal Information Act;

WHEREAS the Responsible Party has obligations to process personal information lawfully, ensure appropriate safeguards, provide transparency to Data Subjects and uphold Data Subject rights as required by law;

WHEREAS the Data Subject requires clear notice of the categories of personal information processed, the purposes of processing, the recipients of the information and the measures to exercise rights and seek remedies;

NOW THEREFORE, in consideration of the mutual acknowledgments below, the parties agree as follows:

1. DEFINITIONS

For the purposes of this Notice: "Personal Information" means any information relating to the Data Subject as defined in applicable law; "Processing" means any operation or set of operations performed on Personal Information; "Information Officer" means the person designated by the Responsible Party to oversee compliance.

2. INFORMATION OFFICER AND CONTACTS

3. PURPOSES OF PROCESSING

The Responsible Party will process Personal Information for the following purposes: to perform and manage the contractual relationship between the parties; to verify identity and prevent fraud; to comply with legal and regulatory obligations; to communicate with the Data Subject; and for record-keeping and audit purposes.

4. CATEGORIES OF PERSONAL INFORMATION

The Responsible Party may collect one or more of the following categories of Personal Information necessary for the stated purposes:

Identifying information (name, identity number, date of birth)
Contact information (address, telephone, email)
Financial information (banking details, payment history)
Employment and credit information
Other special categories as reasonably required:

5. LAWFUL BASIS FOR PROCESSING

Processing is conducted on one or more lawful grounds including where necessary for the performance of a contract, compliance with a legal obligation, to protect legitimate interests of the Responsible Party, and where the Data Subject has provided consent.

Contract performance
Legal obligation
Legitimate interests
Consent (see section 11)

6. PROCESSING ACTIVITIES

Processing activities may include collection, recording, organization, storage, retrieval, alteration, disclosure, erasure and destruction of Personal Information, including processing by automated means where necessary for the stated purposes.

7. DISCLOSURE AND RECIPIENTS

Personal Information may be disclosed to internal personnel with a need-to-know basis, to service providers and processors engaged by the Responsible Party, to courts or regulatory authorities where required, and to other third parties necessary to achieve the purposes set out in this Notice.

8. CROSS-BORDER TRANSFERS

Where Personal Information is transferred or stored outside the jurisdiction, the Responsible Party will ensure appropriate safeguards are in place as required by law. Transfers will be limited to jurisdictions and recipients that provide adequate protection or by means of appropriate contractual protections.

9. RETENTION AND DESTRUCTION

Personal Information will be retained only for as long as required to fulfil the stated purposes, satisfy legal obligations or resolve disputes, and thereafter will be securely destroyed or anonymized in accordance with the Responsible Party’s retention policy.

10. SECURITY MEASURES

The Responsible Party implements administrative, technical and physical safeguards to protect Personal Information against unauthorized access, loss, alteration or destruction. Such measures include access controls, encryption where appropriate, staff training and incident response procedures.

11. DATA SUBJECT RIGHTS

The Data Subject has the right to request access to Personal Information, request correction or deletion, object to or restrict processing, request portability where applicable, withdraw consent to processing previously relied upon, and lodge complaints with the Responsible Party or the relevant authority. Requests must be made in writing and will be responded to within a reasonable time as required by law.

12. COMPLAINTS AND REMEDIES

If the Data Subject wishes to lodge a complaint regarding the Responsible Party’s processing of Personal Information, the Data Subject should contact the Information Officer in writing. The Responsible Party will promptly investigate and provide a reasoned response. The Data Subject may also refer the matter to the applicable data protection authority where available.

13. WITHDRAWAL OF CONSENT

Where processing is based on consent, the Data Subject may withdraw consent at any time by contacting the Information Officer. Withdrawal does not affect the lawfulness of processing based on consent prior to withdrawal nor processing on other lawful bases.

Consent to the processing described in this Notice: I hereby consent to the collection and processing of my Personal Information for the purposes set out in this Notice.

14. NOTICES

Any notice under this Notice shall be in writing and delivered to the contact details provided by the parties. Notices to the Responsible Party shall be sent to: . Notices to the Data Subject shall be sent to: .

15. GOVERNING LAW; ENTIRE AGREEMENT; SEVERABILITY

This Notice shall be governed by the laws applicable to the Responsible Party's operations. This Notice constitutes the entire statement of the Responsible Party’s data processing practices provided to the Data Subject in respect of the matters set out herein and supersedes any prior communication on the same. If any provision of this Notice is held to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

16. AMENDMENTS; WAIVER; COUNTERPARTS

This Notice may be amended by the Responsible Party where required by changes in law or regulatory practice; material amendments that adversely affect the Data Subject will be notified. No waiver of a provision is effective unless in writing. This Notice may be executed in counterparts.

17. ACKNOWLEDGEMENT

By signing below the parties acknowledge receipt of this Notice, confirm they have read and understood its contents and accept the terms set out herein.

Sign Now