POPIA Compliance

Protection of Personal Information Act (POPIA) Compliance

1. Introduction

Coastal Rush Errands ("we", "us", or "our") is committed to complying with the Protection of Personal Information Act 4 of 2013 ("POPIA") and protecting the personal information of our customers, employees, and stakeholders.

This POPIA Compliance Statement outlines our commitment to data protection and privacy in accordance with South African law.

2. Our POPIA Compliance Framework

2.1 Information Officer

We have appointed an Information Officer responsible for overseeing our POPIA compliance and data protection practices.

2.2 Data Protection Policies

• Comprehensive privacy policy aligned with POPIA requirements
• Data processing agreements with all third-party service providers
• Regular staff training on data protection and privacy
• Incident response procedures for data breaches
• Regular compliance audits and assessments

3. Lawful Processing of Personal Information

We only process personal information where we have a lawful basis to do so, including:

• Consent: Where you have provided clear consent for processing
• Contract: Where processing is necessary for the performance of a contract
• Legitimate Interest: Where processing is necessary for our legitimate business interests
• Legal Obligation: Where processing is required by law

4. Your POPIA Rights

Under POPIA, you have the following rights regarding your personal information:

4.1 Right to be Informed

You have the right to be informed about the collection and processing of your personal information.

4.2 Right of Access

You have the right to request access to your personal information that we hold.

4.3 Right to Rectification

You have the right to have your personal information corrected if it is inaccurate or incomplete.

4.4 Right to Erasure

You have the right to request the deletion of your personal information in certain circumstances.

4.5 Right to Object

You have the right to object to the processing of your personal information.

4.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used format.

4.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

5. Data Subject Requests

To exercise any of your POPIA rights, please contact our Information Officer using the details provided above. We will respond to your request within the timeframes prescribed by POPIA.

6. Data Breach Notification

In the event of a data breach that poses a risk to your personal information, we will:

• Notify the Information Regulator within 72 hours
• Notify affected data subjects without undue delay
• Take appropriate measures to mitigate the breach
• Document the breach and our response

7. International Data Transfers

Where personal information is transferred outside South Africa, we ensure adequate protection through:

• Data processing agreements with appropriate safeguards
• Assessment of the recipient country's data protection laws
• Implementation of technical and organizational measures

8. Complaints and Disputes

If you are dissatisfied with our handling of your personal information or believe we have not complied with POPIA, you may:

• Contact our Information Officer to resolve the matter
• Lodge a complaint with the Information Regulator of South Africa

9. Updates to This Statement

We may update this POPIA Compliance Statement from time to time. Any changes will be communicated to you and the updated version will be published on our website.