Home / POPIA Compliance
Legal

POPIA Compliance

Act: Protection of Personal Information Act, No. 4 of 2013  |  Last Updated: 1 January 2025

Mokoena Fortified Holdings is fully committed to compliance with the Protection of Personal Information Act (POPIA), Act 4 of 2013, of the Republic of South Africa. This page explains how we uphold your rights and handle your personal information responsibly.

1. What is POPIA?

POPIA is South Africa’s primary data protection law. It regulates how organisations collect, store, use, share and destroy personal information, and gives every person the right to have their personal information protected against unlawful collection, retention, dissemination and use.

2. Our Commitment

We are committed to processing personal information lawfully, transparently and securely, collecting only what we need, and respecting the rights of every data subject.

3. The 8 Conditions for Lawful Processing

  • Accountability
  • Processing limitation
  • Purpose specification
  • Further processing limitation
  • Information quality
  • Openness
  • Security safeguards
  • Data subject participation

4. Information Officer

Our Information Officer oversees POPIA compliance and can be reached at [email protected].

5. How We Collect Personal Information

We collect information directly from you when you request a quote, place an order or contact us, and automatically through our website as described in our Privacy Policy.

6. Special Categories of Information

Where we handle sensitive information (such as ID numbers for company registration), we apply additional safeguards and use it strictly for the intended purpose.

7. Data Subject Rights

You have the right to be informed, to access, to correct or delete, to object to processing, and to complain to the Information Regulator.

8. Security Safeguards

We apply appropriate technical and organisational measures — secure hosting, encryption in transit and access controls — to protect personal information.

9. Breach Notification

In the event of a data breach affecting your personal information, we will notify you and the Information Regulator as required by POPIA.

10. Third-Party Operators

Where third parties process personal information on our behalf, they are bound by written agreements to protect it and process it only as instructed.

11. How to Lodge a Complaint

You may contact us first, or lodge a complaint directly with the Information Regulator of South Africa.

Contact Us

For any questions about this policy or to exercise your rights, contact us:

Theme
Done