PROMORA DIGITAL — STUDIO
POPIA PRIVACY & DATA PROTECTION POLICY
Protection of Personal Information Act 4 of 2013
Effective Date: [INSERT DATE]
1. Purpose
Promora Digital is committed to processing personal information responsibly and in accordance with applicable South African data-protection requirements.
This policy explains our approach to personal information processed in connection with our website and services.
2. Responsible Party
Responsible Party: [REGISTERED LEGAL ENTITY]
Trading Name: Promora Digital
Division: STUDIO
Registration Number: [INSERT]
Address: [INSERT]
3. Information Officer
Information Officer: [INSERT NAME]
Email: [INSERT EMAIL]
Telephone: [INSERT]
Physical Address: [INSERT]
4. Processing Principles
We seek to process personal information in a manner that is:
lawful;
reasonable;
transparent;
purpose-specific;
relevant;
proportionate;
accurate;
appropriately retained;
and reasonably secured.
5. Personal Information
Information processed may include identity, contact, professional, technical, billing and service-related information.
6. Purpose of Processing
Information may be processed for:
customer administration;
quotations;
contracts;
payments;
hosting;
domain administration;
email services;
website development;
website management;
career branding;
CV and resume services;
portfolio creation;
communications;
security;
fraud prevention;
marketing where legally permitted;
and compliance with legal obligations.
7. Special Personal Information
Clients should not provide special personal information unless it is genuinely required for a specific service and lawful basis for processing exists.
Where special personal information is required, appropriate safeguards will be considered and applied.
8. Third-Party Operators
Promora Digital may use third-party operators to provide infrastructure or services.
Where applicable, appropriate contractual and security measures will be used to regulate such processing.
9. Security Safeguards
Reasonable safeguards may include:
access controls;
password protection;
authentication;
backups;
security monitoring;
software updates;
restricted administrative access;
secure communication;
and appropriate technical controls.
10. Data Subject Requests
Individuals may contact the Information Officer regarding applicable rights concerning their personal information.
Requests may include:
access requests;
correction requests;
deletion requests where legally applicable;
objection to processing where applicable;
complaints;
and requests concerning marketing communications.
11. Security Compromises
Where a security compromise occurs that triggers applicable notification obligations, Promora Digital will take appropriate steps in accordance with applicable law, including notification to affected data subjects and/or the Information Regulator where required.
12. Direct Marketing
Electronic direct marketing will be conducted in accordance with applicable legal requirements.
Recipients may exercise applicable rights to object to or opt out of marketing communications.
13. Data Retention
Personal information will be retained in accordance with applicable legal, contractual and operational requirements.
14. Complaints
Privacy complaints may be directed to the Information Officer.
Where a complaint cannot be resolved internally, individuals may have recourse to the Information Regulator in accordance with applicable procedures.
15. Policy Review
This policy will be reviewed periodically and amended where necessary.
Last Updated: [INSERT DATE]