POPIA Notice

1. Lawful processing

We process personal information lawfully, minimally and only for the purposes set out in our Privacy Policy. Information is collected directly from you, or from a provider, responder or authority involved in a matter you reported where that is necessary to deal with it.

2. Special personal information

Some features involve special personal information: health details in a medical emergency, information about a person's immigration status in an official case file, and biometric data such as a face capture or fingerprints taken by authorised officers during verification.

We process this information only where the law permits, where it is necessary to protect a person's vital interests, or with the consent of the person concerned. Biometric templates are held in restricted storage, are not shown on public pages and are not used for facial recognition of members of the public.

3. Your rights

• To be told whether we hold your personal information and to receive a copy.
• To ask us to correct or delete information that is inaccurate, irrelevant, excessive or unlawfully obtained.
• To object to processing based on legitimate interests.
• To withdraw consent for processing that relies on consent.
• To object to direct marketing at any time, free of charge.
• Not to be subject to a decision based solely on automated processing that significantly affects you.
• To complain to the Information Regulator.

4. How to exercise them

Send your request to our Information Officer through the Contact page. We may ask you to verify your identity, and we respond within 30 days unless a longer period is allowed by law.

We do not charge a fee to correct or delete your information. A prescribed fee may apply to a formal PAIA request for records.

5. Direct marketing and notifications

You control the notifications you receive in your notification settings. Marketing messages, where offered, are sent only with your opt-in consent and can be stopped at any time.

6. Breach notification

If your personal information is compromised, we notify you and the Information Regulator as soon as reasonably possible after discovering it, and we tell you what you can do to protect yourself.