POPIA notice
Under the Protection of Personal Information Act 4 of 2013, each company using the software is the responsible party for personal information inside its workspace. We are the operator.
Section 72 — transfers outside the Republic: information is stored and processed outside South Africa. By creating a workspace the company's authorised representative consents to this transfer on the company's behalf and undertakes to inform its own data subjects where required.
Section 19–21 — security and operator agreement: we maintain reasonable technical and organisational measures and will enter into a written operator agreement with any company that requests one.
Section 22 — breach notification: we notify affected companies without undue delay so they can notify the Regulator and their data subjects.
Questions: hello@stockroom.example