Skip to content
Draft · version 2026-09-draft · legal review pending

POPIA notice

Under the Protection of Personal Information Act 4 of 2013, each company using the software is the responsible party for personal information inside its workspace. We are the operator.

Section 72 — transfers outside the Republic: information is stored and processed outside South Africa. By creating a workspace the company's authorised representative consents to this transfer on the company's behalf and undertakes to inform its own data subjects where required.

Section 19–21 — security and operator agreement: we maintain reasonable technical and organisational measures and will enter into a written operator agreement with any company that requests one.

Section 22 — breach notification: we notify affected companies without undue delay so they can notify the Regulator and their data subjects.

Questions: hello@stockroom.example