POPIA Information Notice

Purpose of This Notice

This notice is issued in accordance with Section 18 of the Protection of Personal Information Act 4 of 2013 (“POPIA”). It informs you of your rights and explains how Final Space (Pty) Ltd collects, uses, and protects your personal information.

Responsible Party

Information Officer

Our Information Officer is responsible for ensuring compliance with POPIA. All data access requests and POPIA-related queries should be directed to info@finalspace.co.za.

Categories of Personal Information Processed

• Identity information (name, surname)
• Contact details (email address, phone number)
• Business information (company name, job title)
• Communication records (emails, form submissions)
• Technical data (IP address, browser, usage analytics)
• Financial information (invoicing and payment records for clients)

Purpose of Processing

• Providing and managing data engineering and analytics services
• Responding to enquiries and communications
• Fulfilling contractual obligations with clients
• Issuing invoices and processing payments
• Improving our products, services, and website
• Complying with applicable legal and regulatory requirements

Recipients of Personal Information

Personal information may be shared with third-party service providers who assist us in delivering our services (e.g., cloud infrastructure, email, and analytics providers). These parties are bound by confidentiality obligations and may not use personal information for their own purposes.

Cross-Border Transfers

Some of our third-party service providers operate outside South Africa. Any cross-border transfer of personal information is conducted in compliance with Section 72 of POPIA, ensuring that the recipient country or organisation provides an adequate level of protection.

Your Rights Under POPIA

As a data subject, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that inaccurate or incomplete information be corrected
• Deletion: Request deletion of your personal information, subject to legal retention obligations
• Objection: Object to processing of your personal information in certain circumstances
• Withdrawal of consent: Withdraw any consent previously given, without affecting lawfulness of prior processing
• Complaints: Lodge a complaint with the Information Regulator of South Africa

How to Exercise Your Rights

Submit a written request to info@finalspace.co.za. We will respond within a reasonable time and no later than 30 days from receipt of your request. We may require proof of identity before processing your request.

Information Regulator

You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed in violation of POPIA:

Security

Finalspace takes appropriate technical and organisational measures to safeguard personal information against loss, theft, unauthorised access, disclosure, or destruction. In the event of a data breach that poses a real risk of harm, we will notify affected data subjects and the Information Regulator as required by POPIA.

Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Client records are typically retained for a minimum of five (5) years for accounting and legal purposes.