POPI Act Compliance

How we protect your personal information in accordance with South African law

Understanding the POPI Act

The Protection of Personal Information Act (POPI Act or POPIA) is South Africa's data protection law that came into full effect on July 1, 2021. The purpose of the POPI Act is to protect personal information, regulate the processing of personal information, and provide rights and remedies to individuals regarding the processing of their personal information.

At Hambacompare, we are committed to complying with the POPI Act and protecting your personal information. This page explains how we adhere to the POPI Act requirements and what rights you have regarding your personal information.

Our Commitment to POPI Act Compliance

Hambacompare is committed to:

  • Processing personal information lawfully and in a reasonable manner that does not infringe on your privacy
  • Collecting personal information for specific, explicitly defined, and legitimate purposes
  • Ensuring that personal information is adequate, relevant, and not excessive for the purpose for which it is processed
  • Maintaining the quality of personal information by keeping it accurate, complete, and up-to-date
  • Not retaining personal information for longer than necessary to achieve the purpose for which it was collected
  • Implementing appropriate technical and organizational measures to secure personal information
  • Processing personal information in accordance with your rights under the POPI Act

How We Apply POPI Act Principles

Accountability

We have appointed an Information Officer responsible for ensuring that we comply with the POPI Act and addressing any concerns or complaints.

Processing Limitation

We only collect and process personal information with your consent and for legitimate purposes related to our insurance comparison service.

Purpose Specification

We collect personal information for specific, explicitly defined purposes and do not use it for other incompatible purposes.

Further Processing Limitation

We do not further process personal information in a way that is incompatible with the purpose for which it was collected.

Information Quality

We take reasonable steps to ensure that the personal information we collect is complete, accurate, not misleading, and updated when necessary.

Openness

We maintain documentation of all processing operations and provide clear information about how we collect and process personal information.

Security Safeguards

We implement appropriate technical and organizational measures to protect personal information against loss, damage, unauthorized destruction, and unlawful access.

Data Subject Participation

We respect your right to access, correct, or delete your personal information, and to object to its processing.

Your Rights Under the POPI Act

As a data subject under the POPI Act, you have the following rights:

Right to Access

You have the right to request confirmation of whether we hold personal information about you and to access that information.

Right to Correction

You have the right to request the correction of your personal information if it is inaccurate, incomplete, misleading, or out of date.

Right to Deletion

You have the right to request the deletion or destruction of your personal information under certain circumstances, such as when it is no longer necessary for the purpose for which it was collected.

Right to Object

You have the right to object to the processing of your personal information on reasonable grounds relating to your particular situation.

Right to Submit a Complaint

You have the right to submit a complaint to the Information Regulator if you believe that your personal information has been processed in violation of the POPI Act.

Right Not to be Subject to Direct Marketing

You have the right to object to the processing of your personal information for direct marketing purposes.

To exercise any of these rights, please contact our Information Officer at [email protected].

Our Data Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

We also ensure that any third parties that process personal information on our behalf implement appropriate security measures and comply with the POPI Act.

Our Information Officer

In accordance with the POPI Act, we have appointed an Information Officer who is responsible for:

If you have any questions, concerns, or requests regarding the processing of your personal information or our compliance with the POPI Act, please contact our Information Officer at:

Information Officer
Email: [email protected]