POPIA

1. Our commitment

IT² Digital Studio is committed to processing personal information lawfully, fairly and transparently. For the details of what we collect and why, see our Privacy Policy.

2. Our Information Officer

Our Information Officer is responsible for making sure we comply with POPIA and for handling requests and complaints about your personal information.

3. How we meet the conditions for lawful processing

POPIA sets out eight conditions for processing personal information lawfully:

• Accountability: we take responsibility for complying with POPIA, and our Information Officer oversees this.
• Processing limitation: we collect only what we need to respond to you and deliver our services, with your consent or another lawful basis.
• Purpose specification: we collect information for specific, defined purposes and do not keep it longer than needed.
• Further processing limitation: we do not use your information for purposes unrelated to why it was collected.
• Information quality: we take reasonable steps to keep your information accurate and up to date.
• Openness: we tell you what we collect and why, through this page and our Privacy Policy.
• Security safeguards: we protect your information with appropriate technical and organisational measures.
• Data subject participation: you can access, correct or delete the information we hold about you.

4. Your rights

As a data subject, you have the right to:

• be told that your personal information is being collected;
• ask whether we hold personal information about you, and request access to it;
• ask us to correct, update or delete your personal information;
• object to the processing of your personal information on reasonable grounds;
• refuse or withdraw consent to direct marketing at any time;
• be told if your personal information has been accessed by an unauthorised person;
• lodge a complaint with the Information Regulator.

5. How to make a request

To exercise any of these rights, email our Information Officer at tasneem@it2digital.co.za and say what you are asking for.

• We may ask you to confirm your identity before we act on the request, to protect your information.
• Objections and requests to correct or delete information can also be made on the prescribed forms (Form 1 and Form 2 of the POPIA Regulations), available from the Information Regulator.
• We will respond within a reasonable time. Access requests are not charged for, except where the law allows a prescribed fee, and we will tell you about any fee upfront.

6. Direct marketing

We will only send you marketing communications if you have agreed to receive them, or if you are an existing client and the communication relates to similar services. Every message will include a way to opt out.

7. Security compromises

If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you as soon as reasonably possible, as required by section 22 of POPIA.

8. Complaints

If you have a concern about how we handle your personal information, please contact our Information Officer first so we can try to resolve it. You also have the right to lodge a complaint with the Information Regulator (South Africa). Their contact details are on their website: inforegulator.org.za.