POPIA Compliance Policy

Moja Consultants is committed to protecting the privacy, integrity, and confidentiality of all personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

This policy outlines how we lawfully collect, process, store, and protect personal information obtained from clients, partners, and visitors to our website.

1. Purpose of this Policy

• Promote transparency and trust in how we handle personal information
• Ensure compliance with POPIA and other applicable data protection laws
• Inform data subjects (you) of your rights regarding your personal information

2. What is Personal Information?

According to POPIA, personal information includes (but is not limited to):

• Names, ID numbers, and contact details
• Physical or email addresses
• Company registration and tax numbers
• Any other information that can identify an individual or business

3. Information We Collect

We collect personal information directly from you when you:

• Complete a contact form or quote request
• Use our services (e.g., CIPC, CIDB, COIDA, branding)
• Send us an email, WhatsApp, or other communication
• Sign up for newsletters or service notifications

4. How We Use Personal Information

We collect and process your information only for legitimate business purposes, including:

• Providing compliance and branding services
• Processing registrations, applications, and amendments
• Communicating with clients and sending invoices or tax documents
• Submitting information to third-party authorities (e.g., CIPC, SARS, CIDB, NHBRC)
• Internal record-keeping and legal compliance

5. Consent and Justification

We process your personal information based on your consent, legal obligation, contractual obligation, or legitimate business interest. You may withdraw consent at any time, subject to limitations.

6. Sharing of Information

Moja Consultants does not sell or rent personal information. We may share information with government entities, trusted partners, or legal authorities when required by law. All parties are bound by confidentiality obligations.

7. Data Protection Measures

• Secure, password-protected systems
• Restricted access to authorised personnel
• Secure platforms for communication and file handling
• Regular backups and monitoring

8. Data Retention

We retain personal information only as long as necessary for legal, regulatory, accounting, or service-related purposes. Data is securely deleted when no longer required.

9. Your Rights Under POPIA

• Access the personal information we hold about you
• Request correction or deletion of your personal data
• Object to the processing of your personal information
• Withdraw consent at any time (subject to limitations)

10. Policy Updates

We may update this policy to reflect legal changes or internal improvements. The latest version will always be available on our website or by request.