PROTECTION OF PERSONAL INFORMATION ACT (POPIA) COMPLIANCE MANUAL
1. SCOPE AND FRAMEWORK This framework governs data processing operations at Matlosana.co.za, ensuring compliance with POPIA for all directory subscribers, marketing clients, and platform users.
2. THE 8 CONDITIONS FOR LAWFUL PROCESSING We manage data workflows strictly under the following pillars:
- Accountability: The designated Information Officer ensures compliance oversight.
- Processing Limitation: Personal and operational information is gathered via clear consent for listing and advertising purposes.
- Purpose Specification: Information is collected purely to publish business profiles, manage accounts, and compile performance metrics.
- Further Processing Limitation: Any secondary data processing must align with the primary intent of directory management.
- Information Quality: Directory clients are encouraged to keep their public listings accurate, complete, and current.
- Openness: Clear disclosure of data usage via our public-facing legal documents.
- Security Safeguards: Deploying access controls and secure database parameters to defend infrastructure against unauthorized breaches.
- Data Subject Participation: Providing straightforward procedures for clients to view, edit, or request erasure of their operational profiles.
3. CATEGORIES OF DATA SUBJECTS AND RECORDS
- Website Users: Browsing data, geographical points, and inquiry records.
- Directory Clients & Sponsors: Listing profiles, trade contact info, contract terms, billing statements, and payment histories.
- Operational Operators: System administration logs and access credentials.
4. TRANSBORDER FLOWS Platform data is hosted within secure cloud facilities. If data moves across South African borders (e.g., global backup hosting), we ensure the vendor is bound by strict privacy frameworks equivalent to POPIA rules.