Protection of Personal Information Act (POPIA) Compliance

1. Introduction

Go Property Solutions is committed to compliance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA"), which came into effect on 1 July 2021. POPIA regulates how we collect, process, store, and share personal information in South Africa.

2. Our Commitment

As a responsible organization, we are committed to:

• Processing personal information lawfully and in a reasonable manner
• Collecting personal information only for specific, explicitly defined, and lawful purposes
• Ensuring that personal information is complete, accurate, and up-to-date
• Keeping personal information confidential and secure
• Respecting your rights as a data subject

3. Lawful Basis for Processing

We process personal information based on the following lawful grounds:

• Consent: When you have given clear consent for us to process your personal information
• Contract: When processing is necessary for the performance of a contract with you
• Legal Obligation: When we need to comply with legal requirements, such as FICA
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights

4. Your Rights Under POPIA

As a data subject, you have the following rights:

• Right to Access: Request access to your personal information we hold
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information under certain circumstances
• Right to Object: Object to processing of your personal information
• Right to Restrict Processing: Request restriction of how we process your information
• Right to Data Portability: Request transfer of your personal information to another service provider
• Right to Withdraw Consent: Withdraw consent for processing at any time
• Right to Lodge a Complaint: Lodge a complaint with the Information Regulator

5. How We Protect Your Information

We implement appropriate technical and organizational measures to protect personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Staff training on data protection
• Secure storage and disposal of physical documents

6. Information Sharing

We only share personal information with third parties when:

• We have your explicit consent
• It is necessary to fulfill our contractual obligations
• We are required to do so by law
• It is necessary for our legitimate business interests

When we share information with third parties, we ensure they are also POPIA compliant and have appropriate safeguards in place.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we securely delete or anonymize it.

8. Direct Marketing

Under POPIA, we may only send you direct marketing communications if:

• You have given consent, or
• You are an existing customer and we are marketing similar products/services, and you have been given an opportunity to opt-out

You can opt-out of marketing communications at any time by contacting us or using the unsubscribe link in our emails.

9. Cross-Border Transfers

If we transfer personal information outside of South Africa, we ensure that adequate safeguards are in place to protect your information in accordance with POPIA requirements.

10. Information Regulator

If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator:

11. Contact Us

For any questions about our POPIA compliance or to exercise your rights, please contact our Information Officer: