Data Protection Policy

Policy Statement

This policy outlines the steps taken by Intelligent Safe Technologies (Pty) Ltd ("the Company") to protect the personal information of its clients and employees in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

1. Collection of Personal Information (Section 4)

1.1

Personal information will only be collected for specific, explicitly defined and lawful purposes as contemplated in clause 12 & 13 of the Company's POPIA & PAIA Compliance and Management Framework.

1.2

Personal information will be collected by fair and lawful means.

2. Processing of Personal Information (Section 5)

2.1

Personal information will only be processed if it is in accordance with lawful purpose for which it was collected.

2.2

Personal information will be processed with sufficient security measures in place to protect against unauthorised access, destruction or alteration of the information.

3. Retention of Personal Information (Section 6)

3.1

Personal information will not be kept for longer than necessary. The period that personal information will be kept will be determined by the purpose for which it was collected.

3.2

Upon the expiry of the retention period, the information will be securely destroyed. The retention period shall expire when the purpose for which the personal information was collected has been extinguished.

4. Disclosure of Personal Information (Section 7)

4.1

Personal information will not be disclosed to any third party unless required by law or such disclosure is necessary for and in accordance with the lawful purpose for which the personal information is kept.

4.2

If personal information is disclosed to a third party, measures will be taken to ensure that the information is protected by that third party in accordance with POPIA.

5. Accuracy of Personal Information (Section 8)

5.1

Reasonable steps will be taken to ensure that personal information is accurate and complete.

5.2

Individuals have the right to request that their personal information be corrected if it is found to be inaccurate.

6. Access to Personal Information (Section 9)

6.1

Individuals have the right to request access to their personal information that is being processed.

6.2

The Company will provide the requested information within a reasonable time frame.

7. Responsibility (Section 10)

7.1

The Company shall appoint a person responsible for ensuring that this policy is effectively implemented.

7.2

All employees of the Company will be trained on POPIA and the importance of protecting personal information.

8. Breaches of Personal Information (Section 11)

8.1

In the event of a breach of personal information, the Company will take all reasonable steps to contain the breach and prevent further unauthorised access or processing of the information.

8.2

The Company will notify the Information Regulator and any affected individuals of the breach as soon as possible.

Policy Compliance

This Policy is binding on all employees of the Company and all such employees agree to abide by its provisions and to protect the personal information of the Company's clients and its employees in accordance with POPIA.

The Company reserves the right to amend this policy at any time. Any changes will be communicated to employees in a timely manner.