Legal

POPIA Compliance

Last updated: May 2025

1. Our Commitment

RR Roof Waterproofing (Pty) Ltd ("we", "us" or "our") is committed to the lawful, responsible and transparent processing of personal information as required by the Protection of Personal Information Act 4 of 2013 (POPIA), which came into full effect on 1 July 2021.

This page describes how we comply with POPIA, including the conditions for lawful processing, the rights of data subjects and how those rights can be exercised.

2. Who We Are

Under POPIA, RR Roof Waterproofing (Pty) Ltd is the Responsible Party — the entity that determines the purpose and means of processing your personal information.

3. Information Officer

In terms of Section 55 of POPIA, we have designated an Information Officer responsible for ensuring compliance with POPIA and handling data subject requests and complaints. The Information Officer can be reached at:

4. Personal Information We Process

We process only the personal information necessary to provide our roofing, waterproofing and related services. This may include:

  • Full name and contact details (phone number, email address)
  • Property address and details relevant to the services required
  • Records of correspondence, quotations and service agreements
  • Payment-related information (processed securely through third-party payment providers)
  • Website usage data collected through cookies and analytics (see our Privacy Policy)

5. Conditions for Lawful Processing

We process personal information in accordance with the eight conditions for lawful processing set out in POPIA:

  • Accountability — We take responsibility for the personal information we hold and ensure it is processed lawfully
  • Processing limitation — We only collect personal information for a specific, defined and lawful purpose
  • Purpose specification — Personal information is collected for a clearly defined purpose and not processed in a manner incompatible with that purpose
  • Further processing limitation — Personal information is not processed further in a way that is incompatible with the original purpose
  • Information quality — We take reasonable steps to ensure the personal information we hold is complete, accurate and up to date
  • Openness — We inform data subjects about the collection of their personal information and maintain this POPIA compliance documentation
  • Security safeguards — We implement appropriate security measures to protect personal information from unauthorised access, loss or damage
  • Data subject participation — We respect and facilitate the rights of data subjects to access and correct their personal information

6. Your Rights as a Data Subject

Under POPIA, you have the following rights in respect of your personal information:

  • Right to be notified — You have the right to be informed when your personal information is being collected
  • Right to access — You may request access to the personal information we hold about you
  • Right to correction or deletion — You may request that inaccurate, irrelevant, outdated or incomplete personal information be corrected or deleted
  • Right to object — You may object to the processing of your personal information on reasonable grounds, or for direct marketing purposes at any time
  • Right not to be subject to automated decision-making — You have the right not to be subject to decisions made solely on automated processing of your personal information
  • Right to lodge a complaint — You may submit a complaint to the Information Regulator if you believe your rights have been infringed

7. How to Exercise Your Rights

To exercise any of your rights under POPIA, please submit a written request to our Information Officer:

Please include your full name, contact details and a description of your request. We will respond within a reasonable time and may request proof of identity before processing your request.

8. Cross-Border Data Transfers

Where personal information is transferred to a third party outside South Africa (for example, cloud storage or email service providers), we ensure that the recipient is subject to a law, binding corporate rules or a binding agreement that provides an adequate level of protection substantially similar to the conditions set out in POPIA.

9. Data Breach Notification

In the event of a security breach involving your personal information, we will notify you and the Information Regulator as required by Section 22 of POPIA, as soon as reasonably possible after becoming aware of the breach.

10. Complaints to the Information Regulator

If you are not satisfied with our response to a complaint or believe we are processing your personal information unlawfully, you have the right to submit a complaint to the Information Regulator of South Africa:

  • Website: www.justice.gov.za/inforeg/
  • Email: complaints.IR@justice.gov.za
  • Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

11. Related Documents