POPI Act Compliance
Duzi Brakes POPIA Compliance & Data Protection
1. Introduction
Duzi Brakes is committed to protecting personal information in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This manual outlines how we collect, process, store, and protect personal information in our truck and brake repair services.
2. Purpose of the Manual
This manual is compiled in accordance with Section 51 of the Promotion of Access to Information Act (PAIA) and POPIA Sections 11 & 18, ensuring the lawful processing of personal data.
3. Personal Information We Collect
Duzi Brakes may collect and process the following personal information:
- Clients: Name, contact details, vehicle details, service history, and payment details
- Employees and Job Applicants: Identification details, employment history, qualifications, and financial information
- Suppliers and Business Partners: Business contact details and contractual agreements
Under POPIA Section 13, all personal data collected is for specific, legitimate business purposes.
4. Purpose for Processing Personal Information
We collect personal information for the following reasons:
- Providing truck and brake repair services (POPIA Section 9)
- Customer service and communication (POPIA Section 12)
- Billing, invoicing, and payment processing (POPIA Section 8)
- Compliance with legal and regulatory requirements (POPIA Section 14)
- Recruitment and employee management (POPIA Section 10)
5. Lawful Basis for Processing
Duzi Brakes ensures that all personal data processing is aligned with POPIA Section 11, where processing is justified by:
- Consent from the data subject
- A legal obligation
- A contractual requirement
- A legitimate business interest
6. Data Security Measures
In compliance with POPIA Section 19, we implement safeguards to protect personal data, including:
- Secure storage systems (physical and electronic)
- Restricted access to personal data
- Employee confidentiality agreements
- Cybersecurity measures to prevent data breaches
7. Sharing of Personal Information
We do not sell personal information. However, we may share it with:
- Third-party service providers (payment processors, IT services)
- Legal authorities when required by law (POPIA Section 15)
- Regulatory bodies for compliance
8. Retention and Disposal of Information
As per POPIA Section 14, personal data will be retained only for as long as necessary. Once no longer required, information will be securely destroyed or anonymized.
9. Data Subject Rights
Under POPIA Chapter 2, individuals have the right to:
- Access their data (PAIA Section 51)
- Correct or delete personal information
- Object to data processing
- Withdraw consent for marketing communications
10. Complaints and Queries
If you have concerns regarding your personal information, you may contact Duzi Brakes directly or lodge a complaint with the Information Regulator as per POPIA Section 23.
11. Contact Information
For inquiries, appointments, or service concerns, please contact us at: