Privacy Policy

POPIA  PRIVACY POLICY


Last updated: 31/10/2022

Whatwouldkikido.org is a fundraising website owned by Shani Van Straaten and managed by Marina Araki Design.

INTRODUCTION  

What Would Kiki Do  is committed to compliance with, and adheres to, the Protection of Personal Information Act, Act 4 of 2013 (“POPI” or “POPIA”). The purpose of the POPIA is to protect individuals from harm by protecting their personal information, to stop their money being stolen, to stop their identity being stolen, and generally to protect their privacy, which is a fundamental human right.

The POPIA requires the website owner to:

  • Sufficiently inform individuals of the purpose for which their personal information will be collected

       and processed; and

  • Protect personal information from threats, whether internal or external, deliberate or accidental, to safeguard data subjects from harm, and ensure business continuation, minimise business damage and maximise business opportunities.

This policy and compliance framework establishes measures and standards for the protection and lawful processing of personal information within the Company and provides principles regarding the right of individuals to privacy and to reasonable safeguarding of their personal information. We undertake to take all reasonable steps to use personal information only in ways that are compatible with this policy. Any deviations from this policy or breach thereof or incidents that may relate to such a possibility must be reported to the Information Officer.

Details about the Information Regulator can be found at: https:// www.justice.gov.za/inforeg/index.html

IMPORTANT TERMS

Consent means any voluntary, specific, and informed expression of will in terms of which permission is given for the processing of personal information.

Data Subject means the person to whom personal information relates (such as clients or employees) and their personal information.

Electronic communication means any text, voice, sound or image message sent over an electronic communications network which is stored in the network or in the recipient’s terminal equipment until it is collected by the recipient.

Operator means a person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party (such as a lodge or activity provider);

Processing means any operation or activity or any set of operations concerning personal information.

Responsible Party means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information.

WHAT CONSTITUTES PERSONAL INFORMATION OR DATA

Information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to:

  • Information relating to race, gender, sex, pregnancy, marital status, national, ethic or social origin,     colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
  • Information relating to the education or the medical, financial, criminal or employment history of the person;
  • Any identifying number, symbol, email address, physical address, telephone number, location information, online identifier or other assignment to the person;
  • The biometric information of the person;
  • The personal opinions, views or preferences of the person;
  • Correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;
  • The views or opinions of another individual about the person; and
  • The name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person.

INFORMATION OFFICER

The following Information Officer for this website it:
Marina Araki, Web Designer
Mobile:    +27 763639214
Email:       buzz.araki@gmail.com

The responsibilities of the Information Officer in terms of the POPIA are as follows:

  • The development, implementation and monitoring of this policy and compliance framework.
  • The encouragement of compliance with the conditions for the lawful processing of personal information.
  • Managing requests received pursuant to the POPIA.
  • Ensuring compliance of the POPIA, including reporting data breaches to the regulator and data subjects.

SCOPE

The website management has been made aware of their roles in protecting personal information and are responsible for adhering to this policy and for reporting any security breaches or incidents to the Information Officer.

Any service provider that provides services to the website, including a provider of information technology or data storage services, must adhere the requirements of the POPIA to ensure adequate protection of personal information held by them on the What Would Kiki Do behalf.

This policy is in effect for the website https://whatwouldkikido.org

CORE PRINCIPLES  

Whatwouldkikido.org is committed to complying with all applicable regulatory requirements related to the collection and processing of personal information and to the following core principles:

  • Accountability: Whatwouldkikido.org is responsible for personal information from the time of collection to deletion and will develop and maintain reasonable protective measures against risks such as loss, unauthorised access, destruction, use, alteration or revelation of personal information.
  • Purpose Specification:Whatwouldkikido.org will only collect personal information for a legitimate and lawful purpose, retaining such information for only so long as is necessary to fulfil their purpose.
  • Processing Limitation:Personal information may not be processed further in a way that is incompatible with the purpose for which the information was collected initially. The Company undertakes not to provide any information to a third party without consent, except where it is necessary for the proper execution of the service as expected by the client.
  • Openness:Whatwouldkikido.org will clearly inform data subjects when information is collected on them, the reasons for collecting the information and the purpose for which it will be put.
  • Security Safeguards: Whatwouldkikido.org will ensure the security, integrity and confidentiality of personal information in its possession. Whatwouldkikido.org is committed to ensuring that information is only used for legitimate purposes with informed consent and only by authorised representatives of the Whatwouldkikido.org
  • Data Subject Participation: Data subjects can request details of any personal information collected on them at no cost and may also require the correction or deletion of personal information within the specifications of the POPI Act.

WHAT INFORMATION IS COLLECTED

In order to provide our services, we may request client or service provider personal information including, but not limited to:

  • Names (and the names and personal information of the members of your group)
  • Email address

 

THE INFORMATION PROVIDED

The information the Whatwouldkikido.org receives depends upon individuals’ interaction with the website directly
The primary goal in collecting personal information is to provide high-quality, customized services and information.

If an individual chooses to identify themselves by completing the Sign-up form, Whatwouldkikido.org representatives will have access to such information to establish contact.
The same information will be captured by The Obs Pasta Kitchen, in order for their newsletter services to be provided.
Website interaction and information submitted may be stored in a personally identifiable format and will be kept in the strictest confidence. Such information will only be used for internal purposes and will not be sold or disclosed to third parties without permission.

We maintain a strict “No-Spam” policy and will not sell or rent personal information to a third-party for such purposes.

ONLINE PRIVACY

Whatwouldkikido.org website may contain links to other websites or other electronic platforms. Please check with those sites to determine their Privacy and POPI Policies. Please keep in mind that whenever you voluntarily disclose personal information online, for example through email, discussion forums, or elsewhere, that information can be collected and used by others. Ultimately, you are responsible for maintaining the privacy of your personal information.

AUTOMATIC INFORMATION

This information enables the Whatwouldkikido.org to run site usage tools and create statistics about the site. These statistics help us to better understand how the site is being used and what we can do to make it more useful to visitors.

DISCLOSURE OF PERSONAL INFORMATION  

Whatwouldkikido.org will disclose personal information when required to do so by law or in the good-faith belief that such action is necessary to:

  • Conform to the edicts of the law or comply with a legal process served on the Company.
  • Protect and defend the rights or property of the website
  • Co-operate with the investigation of purported unlawful activities.
  • to protect the safety of any individual or the general public.
  • For the purpose of carrying out credit checks on potential clients, where necessary.

RETENTION OF PERSONAL INFORMATION

We will only retain your personal information for as long as it is necessary to fulfil the purposes set out in this policy, unless:

  • retention of the data is required or authorised by law;
  • you have consented to the retention of the data; or
  • retention is necessary as part of your interactions with the Whatwouldkikido.org

Your personal information may be kept in the form of physical or electronic records at our discretion.

LIMITATION

The Company is not responsible for, gives no warranties, nor makes any representations in respect of the privacy policies or practices of any third parties.

AVAILABILITY AND REVISION

The Company reserves the right to change this policy from time to time without prior notice. Any updated policy will be posted on Whatwouldkikido.org

If you have any additional questions about the  collection and storage of data, or require a copy of this policy, please contact the Information Officer.

CONSENT TO THE COLLECTION AND RETENTION OF PERSONAL INFORMATION

By using the Whatwouldkikido.org or submitting your personal information for the Obs Pasta Kitchen newsletter sign-up, you hereby confirm: 

  • • That you have read and understood this Privacy and POPI Policy;
  • That you consent to Whatwouldkikido.org collecting and using your personal information as specified above; and

    That the information you have provided to     Whatwouldkikido.org is true, correct and up to date.