The Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA") gives you specific rights over the personal information we hold about you. This notice explains those rights and exactly how to exercise them. For a description of what we collect and why, see our Privacy Policy.
1. Your Information Officer
Every request described below goes to our Information Officer:
Nhlakanipho Ntuli
Information Officer, Ikusasa Digital Transformation (Pty) Ltd
admin@ikusasadigital.co.za
+27 72 105 4356
2. Your rights
2.1 The right to be informed
You may ask us to confirm, free of charge, whether we hold personal information about you, and to describe what we hold. This is set out in section 23 of POPIA.
2.2 The right of access
You may request a copy of the personal information we hold about you. We may charge a prescribed fee for providing the copy itself, and we will tell you the amount before we proceed.
2.3 The right to correction and deletion
Under section 24 of POPIA you may ask us to correct information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully — or to delete or destroy it where we are no longer authorised to keep it.
Note that we may be unable to delete information we are legally required to retain, such as financial and tax records. Where that applies, we will tell you which records we must keep and for how long.
2.4 The right to object
Where we process your information on the basis of our legitimate interests, you may object at any time on reasonable grounds, under section 11(3) of POPIA. If you object, we will stop that processing unless the law requires otherwise.
2.5 The right to withdraw consent
Where we rely on your consent — for example to send you programme updates and tips — you may withdraw it at any time. Withdrawing consent does not affect processing that already lawfully took place before the withdrawal.
2.6 The right not to be subject to automated decision-making
We do not make decisions about you based solely on automated processing. Partner and Freelancer applications, logged hours, and payments are all reviewed by a person at iDT.
2.7 The right to complain
You may complain to us, and to the Information Regulator — see section 5 below.
3. How to make a request
- Email our Information Officer at admin@ikusasadigital.co.za and describe what you want: access, correction, deletion, objection, or withdrawal of consent.
- Tell us enough to identify you and locate the records — for example the email address you registered with, or your Partner or Freelancer ID.
- Attach proof of identity. We ask for this so we do not disclose your information to someone impersonating you.
- For a formal correction, deletion, or objection request, POPIA prescribes standard forms (Form 2 and Form 1 respectively, under the POPIA Regulations). We will send you the correct form, or accept a clearly written request that contains the same information.
4. What happens next
- We will acknowledge your request as soon as reasonably possible.
- We aim to respond substantively within 30 days. If we need longer because the request is complex, we will tell you and explain why.
- If we correct or delete information, we will notify you once it is done, and where reasonably practicable inform any third party we previously shared it with.
- If we refuse a request, we will tell you in writing which provision we rely on and how you may challenge the decision.
5. Complaining to the Information Regulator
If you are unhappy with how we handled your information or your request, you may lodge a complaint with the Information Regulator of South Africa. You do not have to complain to us first, though we would prefer the chance to put things right.
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
inforegulator.org.za
Complaints to the Regulator are lodged on Form 5 under the POPIA Regulations, available on the Regulator's website.
6. Security compromises
If a security compromise affects your personal information, section 22 of POPIA requires us to notify both you and the Information Regulator as soon as reasonably possible after discovering it, unless a public body responsible for criminal investigations tells us to delay. Our notification will describe what happened, what information was affected, and what you can do to protect yourself.
See also our Privacy Policy and Terms of Use.