POPIA Compliance

How MyOwnPA complies with the Protection of Personal Information Act, 4 of 2013

Last updated: 9 May 2026

My Own PA (Pty) Ltd is committed to full compliance with the Protection of Personal Information Act (POPIA). We believe privacy is a fundamental right — not just a legal obligation. This page explains how we apply POPIA's eight conditions for lawful processing to everything we do.

1. About POPIA

The Protection of Personal Information Act (POPIA), Act 4 of 2013, is South Africa's primary data protection legislation. It governs how organisations collect, use, store and share personal information about South African residents.

POPIA is enforced by the Information Regulator of South Africa. My Own PA (Pty) Ltd, as a responsible party, is fully committed to upholding the rights of data subjects under this Act.

2. Our Responsible Party

My Own PA (Pty) Ltd is the responsible party for all personal information processed through the MyOwnPA platform.

Contact for POPIA matters:
Email: support@myownpa.app
Subject line: POPIA Request — [Your Name]

3. The Eight POPIA Conditions — How We Comply

Condition 1 — Accountability

My Own PA (Pty) Ltd takes full responsibility for ensuring that personal information in our possession is processed in accordance with POPIA. We have appointed an information officer responsible for compliance.

Condition 2 — Processing Limitation

We only collect personal information that is necessary for providing the MyOwnPA service. We do not collect excessive or irrelevant information. Collection always occurs with the User's knowledge and, where required, their explicit consent.

Condition 3 — Purpose Specification

Personal information is collected for specific, explicitly defined purposes — to provide the MyOwnPA service, process payments, and communicate with Users. We do not use personal information for undisclosed purposes.

Condition 4 — Further Processing Limitation

Personal information is not processed in a manner incompatible with the original purpose of collection. We do not share, sell or transfer personal information to third parties for their own marketing or commercial purposes.

Condition 5 — Information Quality

We take reasonable steps to ensure that personal information is complete, accurate and up to date. Users can update their information at any time by contacting us or using the update_contact feature within the platform.

Condition 6 — Openness

We maintain transparent, up-to-date privacy documentation including this POPIA Compliance Statement, our Privacy Policy and our Terms and Conditions — all publicly accessible at myownpa.app.

Condition 7 — Security Safeguards

We implement appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access, interference, modification or disclosure. These include encrypted data transmission, isolated user data environments, access controls and regular security monitoring.

Condition 8 — Data Subject Participation

Users have the right to access, correct and request deletion of their personal information. These rights can be exercised directly through the MyOwnPA platform by voice or text command, or by contacting us at support@myownpa.app.

4. Your Rights as a Data Subject

Right to Access

Request a copy of all personal information we hold about you. Say "Send me a copy of my data" via WhatsApp or email us.

Right to Correction

Request correction of inaccurate or incomplete personal information. Use the update contact feature or contact us directly.

Right to Deletion

Request deletion of your personal information. Say "Delete my data" via WhatsApp. We will process this within 30 days.

Right to Object

Object to the processing of your personal information on reasonable grounds. Contact us at support@myownpa.app.

Right to Opt Out

Opt out of direct marketing communications at any time, immediately and without penalty.

Right to Complain

Lodge a complaint with the Information Regulator at www.inforegulator.org.za if you are not satisfied with our response.

5. Data Retention

We retain personal information only for as long as necessary for the purpose it was collected, or as required by law:

6. Direct Marketing

We will only send direct marketing communications to Users who have explicitly opted in. Users may opt out of direct marketing at any time by:

Opt-out requests are processed immediately. Service-related messages (such as your morning brief and billing notifications) are not marketing communications and will continue until you cancel your subscription.

7. Third-Party Processors

We use the following third-party processors who handle personal information on our behalf. All are bound by data processing agreements and are required to maintain appropriate security standards:

8. Cross-Border Data Transfers

Some of our third-party processors operate outside South Africa. Where personal information is transferred internationally, we ensure that adequate protections are in place equivalent to POPIA's requirements, including contractual safeguards with all processors.

9. Security Incident Response

In the event of a security incident affecting personal information, we will notify affected Users and the Information Regulator as required by POPIA Section 22 — without unreasonable delay. We will communicate clearly what information was affected, what steps we are taking, and what affected Users should do.

10. Contact the Information Regulator

If you are not satisfied with how we have handled your personal information or a POPIA request, you have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za

11. Updates to This Statement

This POPIA Compliance Statement is reviewed regularly and updated as our practices evolve or legislation changes. The date of the most recent update is shown at the top of this page.