Information on this site is advertising in nature

cerulean-birch is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable data protection legislation. This page outlines our data protection practices and your rights as a data subject.

Our Role as a Responsible Party

Under POPIA, cerulean-birch acts as the responsible party for personal information collected through our website and services. We determine the purpose and means of processing personal information and are accountable for compliance with data protection principles.

Lawful Basis for Processing

We process personal information based on one or more of the following lawful grounds:

  • Your consent to the processing
  • Processing necessary for the performance of a contract with you
  • Processing necessary to comply with legal obligations
  • Processing necessary for our legitimate interests, where these do not override your rights

Your Data Subject Rights

As a data subject, you have the following rights under POPIA:

Right to Access

You may request confirmation of whether we process your personal information, as well as access to such information. We will provide this within a reasonable time and in an accessible format.

Right to Correction

You may request that we correct or update inaccurate or incomplete personal information. We will make corrections promptly upon verification of your identity.

Right to Deletion

You may request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purpose for which it was collected.

Right to Object

You may object to the processing of your personal information for direct marketing purposes. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Data Security Measures

We implement appropriate technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

  • Encryption of data in transit and at rest
  • Access controls limiting data access to authorised personnel
  • Regular security assessments and updates
  • Staff training on data protection practices

International Data Transfers

We primarily store and process data within South Africa. Where data may be transferred to service providers in other jurisdictions, we ensure appropriate safeguards are in place to protect your information in accordance with POPIA requirements.

Information Officer

Our Information Officer is responsible for ensuring compliance with data protection legislation and handling data subject requests. To exercise your rights or raise concerns, contact our Information Officer at [email protected].

Complaints

If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the Information Regulator of South Africa.

Last updated: January 2024