Privacy Notice
[Organisation name] (registration number [Registration number]) respects your privacy. This notice explains how we collect and use your personal information, as required by the Protection of Personal Information Act 4 of 2013 ("POPIA"). It applies from [Effective date].
1. Who we are
We are the responsible party for your personal information. Our address is [Physical address] and our website is [Website].
Our Information Officer is [Information Officer name], who you can contact at [Information Officer email].
2. What personal information we collect
We collect the following: [Personal information you collect].
We collect it directly from you, for example when you place an order, fill in a form, contact us or use our website. Where we get it from somewhere else, such as a public record or a referral, we will tell you where. Giving us this information is voluntary, but if you do not give us what we need to deliver a service, we may not be able to provide it.
3. Why we use it
We use your personal information for these purposes: [What you use it for].
We only use it for those purposes, or for purposes closely related to them, unless you agree to something else or the law allows or requires it. We rely on one or more of these grounds: it is needed to carry out a contract with you, it is needed to comply with a law, it protects a legitimate interest of yours or ours, or you have given consent.
4. Who we share it with
We share personal information with: [Who you share it with].
These suppliers may only use the information to provide their service to us, and we require them to keep it secure. We do not sell your personal information.
5. Sending information outside South Africa
Some of our service providers store or process information outside South Africa, in: [Countries information may be sent to]. We only transfer personal information where the recipient is subject to rules or a contract that give similar protection to POPIA, where you consent, or where POPIA otherwise allows it.
6. How long we keep it
We keep personal information [How long you keep it]. When we no longer need it or the law no longer requires us to keep it, we delete or de-identify it.
7. How we protect it
We take reasonable technical and organisational steps to protect your information against loss, damage and unauthorised access. If there is a security compromise that affects your personal information, we will notify you and the Information Regulator as POPIA requires.
8. Your rights
You can ask us to:
- confirm whether we hold personal information about you and give you a copy;
- correct or delete personal information that is inaccurate, out of date, incomplete or that we are no longer entitled to keep;
- stop using your personal information for direct marketing, at any time; and
- stop processing your information in other cases where POPIA lets you object.
To use these rights, email [Information Officer email]. We may need to confirm your identity first.
9. Complaints
If you are unhappy with how we handle your personal information, please contact us first so we can try to fix it. You also have the right to complain to the Information Regulator (South Africa) at inforegulator.org.za.
10. Changes to this notice
We may update this notice. The latest version is always on [Website] and shows the date from which it applies.