What is POPIA?

The Protection of Personal Information Act, 4 of 2013 (POPIA) is South Africa's data-protection law. It regulates how organisations may collect, use, store and share your personal information — anything that identifies you, such as your name, contact details, ID number, purchase history or online identifiers. POPIA requires us to process your information lawfully, transparently and securely, only for legitimate purposes, and it is enforced by the Information Regulator.

Your rights as a data subject

As the person your information relates to, POPIA gives you the right to:

• Access — ask whether we hold personal information about you, and request a copy of it;
• Correction — have inaccurate or outdated information corrected;
• Deletion — request that we delete your information, where the law allows;
• Objection — object to how your information is processed, including for direct marketing;
• Withdrawal of consent — opt out of marketing communications at any time.

How it works

Complete the form below and our Information Officer will handle your request. We may contact you first to verify your identity — this protects your information from being disclosed to someone pretending to be you. We respond within 30 days and the request is free of charge. Full detail on how we handle personal information is in our Privacy Policy and PAIA Manual.

Submit a POPIA request

Tell us which right you want to exercise and we'll take it from there.

Need to make a formal PAIA (information access) request instead? See our PAIA Manual page.