POPIA Notice

The Protection of Personal Information Act, 2013, known as POPIA, regulates how public and private bodies process personal information in South Africa.

This notice explains how Flough applies POPIA principles when we act as a responsible party for our own business information, or as an operator when processing personal information on a client's instruction.

We process personal information only where we have a lawful basis, such as consent, contract performance, legal obligation, protection of a legitimate interest, or our legitimate business interests.

We aim to process information in line with POPIA's conditions for lawful processing, including accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation.

For website enquiries, marketing, business administration, proposals, and our own client relationship records, Flough generally acts as the responsible party.

When a client provides personal information for us to process as part of a project, Flough may act as an operator and process that information only with the client's knowledge, authorisation, and agreed instructions.

We may send direct marketing only where allowed by law, such as where you have consented or where you are an existing contact and the message relates to similar services.

Every direct marketing communication should include a practical way to opt out. You can also opt out by emailing hello@flough.co.za.

Subject to POPIA and other applicable law, you may request access to your personal information, ask us to correct or delete inaccurate, irrelevant, excessive, outdated, incomplete, misleading, or unlawfully obtained information, and object to certain processing.

You may also ask us not to process your personal information for direct marketing.

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will take appropriate steps under POPIA, which may include notifying affected parties and the Information Regulator where required.

Send POPIA requests to hello@flough.co.za. Please include enough information for us to identify you and understand the request.

You may also contact the Information Regulator of South Africa if you believe your personal information rights have been infringed.