POPI ACT

  (In line with the Protection of Personal Information Act, Act, 4 of 2013 ("POPIA")

Respecting and protecting any Personal Information is very important to us. It is also a Constitutional right and good business practice requirement, which we take very seriously.

In line with good practice and the Protection of Personal Information Act, 4 of 2013 (the Act), we:

• Accept joint responsibility and accountability with you to responsibly manage and protect your Personal Information in our dealings with you;
• Undertake to receive (only from you or your authorised delegates) and process only the Personal Information that is necessary for the normal course of business including the purpose of facilitating or concluding any necessary agreements with you and/or for responding to your requests and/or to assist you and/or to provide services to you;
• Undertake not to share or further process your Personal Information with anyone outside of HRV, if not required for assisting you or providing services to you, or as may be required by law, or with your (or your approved delegate's) consent in any other instances;
• Undertake to be open and transparent with as to why your Personal Information needs to be collected;
• Undertake to safeguard and protect your Personal Information in our possession;
• Undertake to freely confirm what Personal Information we have, to update and correct such Personal Information and to keep it for no longer than legally required.
• Undertake to consider the legitimate legal interests of everyone concerned, as required by the Act, and to respect your right to withdraw your consent for the processing of your Personal Information.

We, or the parties who assist us with providing services to you or whom we deal with in the normal course of business, are required to collect, use, and keep your Personal Information as prescribed by relevant laws and regulations and for reasons such as:

• To share information with you and to respond to queries or requests;
• For operational purposes required to assist you or to provide services to you and to carry out transactions relating to you and/or the Society's business;
• To confirm and verify your identity for security purposes;
• For recruitment and people management purposes;
• To conduct credit reference searches or verification, only if you authorise this or if it is a requirement in contracting with you;
• For audit and record-keeping purposes;
• In connection with possible requirements by the Information Regulator or other Government agencies allowed by law, legal proceedings, or court rulings.

We may need to share your Personal Information and/or utilise software or online platforms to enter and process your information for operational purposes in the normal course of business, including banking, access control, security, statutory returns, etc. This will only be done in strict adherence to the requirements of the Act.

We may use "cookies" on our website, to enable us to facilitate responses to you, to improve your future visits to our site as well as to provide you with a more user-friendly experience. Our Cookie Policy can be found on our website.

Please feel free to contact us to discuss any questions or concerns you may have regarding your Personal Information, at enquiries@hibiscusrv.co.za or on 039 312 5000. Any unresolved concerns may be raised with the Information Regulator, who can be contacted as shared below,

Website: https://www.justice.gov.za/inforeg/

Tel: 012 406 4818

Email: inforeg@justice.gov.za

Your Personal Information is defined by the Protection of Personal Information Act (the Act) as:

"information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to - (a) information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person; (b) information relating to the education or the medical, financial, criminal or employment history of the person; (c) any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person; (d) the biometric information of the person; (e) the personal opinions, views or preferences of the person; (f) correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; (g) the views or opinions of another individual about the person; and (h) the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person".