POPIA Compliance

Last updated: 10 July 2026 • Applies to Computer Scientific Solutions (Pty) Ltd, Reg No 2017/103392/07 ("CSS", "we", "us").

The Protection of Personal Information Act 4 of 2013 ("POPIA", also commonly called the "POPI Act") governs how South African organisations process personal information. This page records how CSS meets each of POPIA's eight conditions for lawful processing. Our practical privacy practices are detailed in the Privacy Policy.

The eight conditions and how we meet them

1. Accountability (s8)

Our Information Officer (the Director) is accountable for compliance and is registered with the Information Regulator. Contact: support@csscomp.co.za.

2. Processing limitation (s9–12)

We process personal information lawfully, minimally and — where required — with consent. You may object to processing or withdraw consent at any time.

3. Purpose specification (s13–14)

We collect information for explicit, defined purposes (quoting, service delivery, billing, bookings) and do not keep it longer than those purposes or the law require.

4. Further processing limitation (s15)

We do not reuse personal information for unrelated purposes. If a new purpose arises, we assess compatibility or seek fresh consent.

5. Information quality (s16)

We take reasonable steps to keep records complete, accurate and up to date — and you can ask us to correct yours at any time.

6. Openness (s17–18)

Our Privacy Policy explains what we collect and why, at or before the time of collection.

7. Security safeguards (s19–22)

We secure personal information against loss, damage and unauthorised access with technical and organisational measures, bind our operators to the same standard in writing, and follow the s22 notification duty: if a breach is likely to have compromised personal information, we notify the Information Regulator and affected data subjects as soon as reasonably possible.

8. Data subject participation (s23–25)

You may request access to, correction of, or deletion of your personal information. Requests go to the Information Officer and are handled per POPIA and, where applicable, the Promotion of Access to Information Act 2 of 2000 (PAIA).

Access to information (PAIA)

Requests for records held by CSS may be made under PAIA to the Information Officer. We will provide the prescribed request form and fee information on request.

Direct marketing

We only send electronic marketing in line with s69 of POPIA: existing customers may receive relevant offers with an opt-out in every message; anyone else only with prior consent.

Complaints

If you believe we have processed your information unlawfully, contact us first — most issues are resolved in days. You may also complain to the Information Regulator (South Africa): inforegulator.org.za.

Related: POPI Act Summary • Data Processor Agreement