POPIA Compliance
Protection of Personal Information Act 4 of 2013
What is POPIA?
The Protection of Personal Information Act (POPIA) is South Africa's data protection law, which came into full effect on 1 July 2021. It regulates how organisations collect, store, use, and share your personal information. POPIA gives you rights over your data and requires us to handle it responsibly.
Information Officer
MotoZA has appointed an Information Officer responsible for POPIA compliance. Our Information Officer oversees all personal information processing activities and handles data subject requests.
Conditions for Lawful Processing
MotoZA processes personal information in accordance with the eight conditions for lawful processing set out in POPIA:
Accountability
Our Information Officer is accountable for ensuring POPIA compliance across all processing activities.
Processing Limitation
We only collect information that is necessary, relevant, and adequate for the specific purpose it was collected for.
Purpose Specification
We collect personal information for specific, explicitly defined, and lawful purposes related to our motorcycle parts business.
Further Processing Limitation
We do not use your information for purposes incompatible with the original reason it was collected.
Information Quality
We take reasonable steps to ensure your personal information is accurate, complete, and up to date.
Openness
We are transparent about how we collect and use your information through our Privacy Policy and this notice.
Security Safeguards
We implement appropriate technical and organisational measures to secure your personal information against loss, damage, or unauthorised access.
Data Subject Participation
You have the right to access, correct, and request deletion of your personal information held by us.
Your Rights as a Data Subject
Under POPIA, you have the following rights:
- Right to access: Request a copy of the personal information we hold about you
- Right to correction: Request that we correct inaccurate or incomplete information
- Right to deletion: Request that we delete your personal information (subject to legal retention requirements)
- Right to object: Object to the processing of your information for direct marketing purposes
- Right to complain: Lodge a complaint with the Information Regulator if you believe your rights have been violated
To exercise any of these rights, submit a request to privacy@motoza.co.za. We will acknowledge your request within 3 business days and respond fully within 30 days.
Information Regulator
If you are not satisfied with our response to your data subject request, you may contact the Information Regulator of South Africa:
Data Breach Notification
In the event of a data breach that poses a risk to your rights, MotoZA will notify the Information Regulator and affected data subjects as required by Section 22 of POPIA. Notifications will include the nature of the breach, the information compromised, and steps taken to address the situation.
This POPIA compliance notice should be read together with our Privacy Policy. For any queries, contact privacy@motoza.co.za.