Our Commitment to POPIA
Debt Review Fix SA is fully committed to complying with the Protection of Personal Information Act (Act 4 of 2013). We recognise that the personal information entrusted to us by our clients is sensitive, particularly given the financial nature of our services. This page outlines how we meet our obligations under POPIA and how we safeguard your constitutional right to privacy.
1. What is POPIA?
The Protection of Personal Information Act (POPIA) is South Africa's data protection legislation, fully effective since 1 July 2021. It regulates how organisations collect, process, store, and share personal information. POPIA gives every person in South Africa the right to:
Right to Know
Be informed when your personal information is being collected and what it will be used for.
Right to Access
Request access to the personal information an organisation holds about you.
Right to Correct
Request that inaccurate or outdated personal information be corrected or updated.
Right to Delete
Request deletion of personal information that is no longer necessary for the purpose it was collected.
Right to Object
Object to the processing of your personal information for direct marketing or other purposes.
Right to Complain
Lodge a complaint with the Information Regulator if you believe your rights have been violated.
2. Our Role Under POPIA
Under POPIA, DRFSA acts as a "Responsible Party", meaning we determine the purpose and means of processing your personal information. We are responsible for ensuring that your data is handled lawfully, transparently, and securely.
Personal information is shared only where necessary for an agreed service or legal obligation and supported by a lawful basis. A service provider processing information on our instructions may act as an operator; another organisation may act as an independent responsible party. The applicable role and data protection duties depend on the actual arrangement.
3. The 8 POPIA Conditions We Follow
POPIA prescribes eight conditions for the lawful processing of personal information. Here is how DRFSA adheres to each:
Condition 1: Accountability
DRFSA has appointed an Information Officer who is responsible for ensuring compliance with POPIA across all business operations. We maintain internal policies, conduct staff training, and regularly review our data practices.
Condition 2: Processing Limitation
We only collect personal information that is directly relevant to assessing your recorded status and providing any agreed service. We do not collect excessive data, and we always have a lawful basis (consent, contract, or legal obligation) before processing.
Condition 3: Purpose Specification
We collect your information for specific, defined purposes related to debt review information, assessment and any agreed further service. We inform you of these purposes at the point of collection and do not use your information for unrelated purposes.
Condition 4: Further Processing Limitation
If we need to process your information for a purpose other than what it was originally collected for, we ensure the new purpose is compatible with the original, or we obtain your additional consent.
Condition 5: Information Quality
We take reasonable steps to ensure that your personal information is complete, accurate, and up to date. You may request corrections at any time.
Condition 6: Openness
We are transparent about what information we collect, why we collect it, and how it is used. This POPIA page, together with our Privacy Policy, provides full disclosure of our data practices.
Condition 7: Security Safeguards
We implement appropriate technical and organisational measures to protect your personal information, including encryption, access controls, secure storage, and regular security reviews. In the event of a data breach, we will notify you and the Information Regulator as required by law.
Condition 8: Data Subject Participation
You have the right to request access to, correction of, or deletion of your personal information at any time. We respond to all data subject requests within a reasonable timeframe as prescribed by POPIA.
4. Special Personal Information
POPIA classifies certain categories of data as "special personal information", including religious beliefs, race, health information, and biometric data. DRFSA does not collect special personal information unless it is strictly necessary and legally justified. Where financial information intersects with special categories (such as debt information linked to health-related circumstances), we handle it with the highest level of care and confidentiality.
5. Direct Marketing
Under Section 69 of POPIA, we will only contact you for direct marketing purposes if you have given us prior consent, or if you are an existing client and the communication relates to similar services. Every marketing communication includes an option to opt out. If you opt out, we will stop all direct marketing communications immediately.
6. Cross-Border Data Transfers
DRFSA primarily operates within South Africa and stores all client data on servers located in South Africa. In the unlikely event that personal information needs to be transferred outside of South Africa, we will ensure that the receiving country has adequate data protection laws in place, or that appropriate safeguards (such as binding agreements) are implemented in accordance with Section 72 of POPIA.
7. Data Breach Notification
In the event of a security compromise that affects your personal information, DRFSA will:
- notification_importantNotify the Information Regulator as soon as reasonably possible
- notification_importantNotify you directly via email or phone if your data has been compromised
- notification_importantProvide a description of the breach and the measures taken to address it
- notification_importantRecommend steps you can take to protect yourself
8. How to Exercise Your Rights
You may exercise any of your POPIA rights by contacting our Information Officer. We will verify your identity before processing any request and respond within 30 days. There is no charge for submitting a request, unless the request is manifestly unfounded or excessive.
Information Officer
Debt Review Fix SA (Pty) Ltd
Email: Debtreviewfixsa@gmail.com
Website: debtreviewfixsa.co.za
9. Information Regulator
If you are not satisfied with our response to a data-related request, or you believe your rights under POPIA have been violated, you have the right to lodge a complaint with:
The Information Regulator (South Africa)
Phone: 010 023 5207
Email: enquiries@inforegulator.org.za
Website: inforegulator.org.za