Legal
POPIA Notice
Protection of Personal Information Act, 2013 (Act No. 4 of 2013)
NAFCOC is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA). This notice explains how we process your data on the Funding Watch platform.
Responsible Party
The National African Federated Chamber of Commerce and Industry (NAFCOC), registration number [registration number], with its principal office at 46 Anderson Street, Marshalltown, Johannesburg, 2001, is the responsible party for the processing of your personal information.
Information Officer
Our designated Information Officer can be contacted at privacy@nafcoc.org.za or +27 11 492 2240. You may also contact the Information Regulator at inforeg@justice.gov.za.
Purpose of Processing
We process personal information for the following purposes: facilitating account registration and authentication, receiving and moderating case report submissions, generating aggregated statistics for the national transparency dashboard, communicating platform updates and case status, NAFCOC membership administration, and complying with legal and regulatory obligations.
Categories of Data Subjects
We process personal information relating to registered platform users (entrepreneurs), NAFCOC members, website visitors, and institutional representatives who submit responses to case reports.
Lawful Basis
We process your personal information on the basis of your consent (for case report submission), legitimate interest (for platform operation and advocacy), contractual obligation (for membership services), and legal obligation (for compliance with South African law).
Your Rights
Under POPIA, you have the right to request access to your personal information, request correction or deletion of your information, object to the processing of your information, request restriction of processing, withdraw consent at any time, and lodge a complaint with the Information Regulator.
Data Retention
Published case reports are retained indefinitely as part of the national transparency database. Account information is retained for the duration of your membership or platform registration. You may request deletion of your account at any time, which will anonymise your case reports.
Cross-Border Transfers
The Platform is hosted on infrastructure that may include servers outside South Africa. Where cross-border transfers occur, we ensure adequate levels of protection as required under Section 72 of POPIA.
Complaints
If you are dissatisfied with our handling of your personal information, please contact our Information Officer first. If the matter is not resolved, you may lodge a complaint with the Information Regulator of South Africa at POPIAComplaints@inforegulator.org.za.