POPIA Compliance Policy

Protection of Personal Information Act

Last Updated: December 2025

1

INFORMATION OFFICER

The Company appoints an Information Officer responsible for overseeing POPIA compliance, managing personal information, and responding to data-related enquiries.

2

LAWFUL PROCESSING

All personal information is collected and processed lawfully, fairly, and transparently for specific and legitimate purposes.

3

SECURITY SAFEGUARDS

The Company implements:

  • Encryption protocols
  • Access control mechanisms
  • Secure data storage
  • Breach monitoring and prevention systems
4

BREACH MANAGEMENT

In the event of a data breach:

  • The Information Officer will investigate and mitigate the incident
  • Affected users will be notified where required
  • The Information Regulator will be informed if legally mandated
5

DATA RETENTION

Personal information is retained only for operational, contractual, or legal purposes and then securely erased.

6

CONSENT MANAGEMENT

The Company obtains informed consent prior to processing personal information. Users may withdraw consent at any time.

7

THIRD-PARTY OPERATORS

Third-party service providers, including payment processors, must implement POPIA-compliant security measures.

Limiting Liability Overview

To minimise legal exposure while complying with South African law, the Company adopts the following measures:

  • Prominent disclaimers throughout the App
  • Mandatory acceptance of Terms and Conditions before use
  • Clear assumption-of-risk clauses
  • Indemnity provisions protecting the Company
  • Confirmation that grooming services are performed by independent Service Providers
  • Binding Service Provider Agreements placing full liability on Providers
  • POPIA-compliant personal information notices and procedures