Effective date: 1 June 2026 · Version 1.0
🛡️
POPIA Compliant
Protection of Personal Information Act 4 of 2013
1. What Is POPIA?
The Protection of Personal Information Act 4 of 2013 (POPIA) is South Africa's primary data-protection law. It came into full effect on 1 July 2021. POPIA regulates how organisations collect, use, store and share personal information about identifiable individuals (called "data subjects").
Hopetel is committed to full compliance with POPIA and views the protection of your personal information as a core business obligation.
2. Responsible Party
Hopetel (Pty) Ltd is the Responsible Party as defined in POPIA Section 1. This means we determine the purpose and means for processing your personal information and are accountable for doing so lawfully.
3. The Eight Conditions for Lawful Processing
POPIA establishes eight conditions that Responsible Parties must meet. Here is how Hopetel meets each one:
1. Accountability
We have appointed an Information Officer and maintain internal data-protection policies and staff training.
2. Processing Limitation
We only collect personal information that is necessary for a specific, lawful purpose related to our services.
3. Purpose Specification
We tell you why we collect your data at the point of collection and do not use it for incompatible purposes.
4. Further Processing Limitation
We do not process personal information in a way that is incompatible with the purpose for which it was collected.
5. Information Quality
We take reasonable steps to ensure your personal information is accurate, complete and up to date.
6. Openness
We are transparent about our data-processing activities through this notice, our Privacy Policy and Cookie Policy.
7. Security Safeguards
We use encryption (HTTPS/TLS), access controls and regular security reviews to protect your data from loss, damage or unauthorised access.
8. Data Subject Participation
We honour your rights to access, correct and delete your personal information upon request.
4. Our Lawful Basis for Processing
We process your personal information on one or more of the following lawful grounds under POPIA Section 11:
- Contract performance: Processing your order, activating your VoIP service, and managing your account.
- Legal obligation: Retaining financial records for SARS and complying with FICA / RICA requirements.
- Consent: Sending marketing communications — only where you have explicitly opted in.
- Legitimate interests: Fraud detection, system security, and analytics to improve our services.
5. Your Rights as a Data Subject
Under POPIA you have the following rights:
- Right to be notified (Section 18): You have the right to know when we collect your personal information and why.
- Right of access (Section 23): Request a copy of the personal information we hold about you.
- Right to correction or deletion (Section 24): Ask us to correct inaccurate data or delete information we no longer have a lawful reason to retain.
- Right to object (Section 11(3)): Object to the processing of your personal information, particularly for direct marketing.
- Right to complain (Section 74): Lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact our Information Officer at [email protected]. We will respond within 30 days.
As required by POPIA Section 55, Hopetel has designated an Information Officer responsible for:
- Encouraging compliance with the conditions for lawful processing.
- Dealing with requests from data subjects and the Information Regulator.
- Working with the Information Regulator in relation to investigations.
Contact our Information Officer: [email protected]
7. Data Breach Response
In the event of a security compromise that involves personal information, we will:
- Assess the breach immediately to determine the scope and impact.
- Notify the Information Regulator as soon as reasonably possible (POPIA Section 22).
- Notify affected data subjects where the breach is likely to result in serious harm to them.
- Take immediate steps to mitigate the breach and prevent recurrence.
8. Contact the Information Regulator
If you are not satisfied with Hopetel's response to a data-protection concern, you have the right to lodge a complaint with the Information Regulator of South Africa: