Data Protection Policy

Last updated: September 2024

1. Purpose

This policy sets out how MyAll SA (Pty) Ltd complies with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable data protection laws.

2. Scope

This policy applies to all personal data processed by MyAll SA (Pty) Ltd, including data collected through our website, mobile applications, and other services.

3. Principles

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process personal data lawfully, fairly, and transparently.
• Purpose limitation: We collect personal data for specified, explicit, and legitimate purposes.
• Data minimisation: We only collect personal data that is adequate, relevant, and limited to what is necessary.
• Accuracy: We ensure that personal data is accurate and kept up to date.
• Storage limitation: We keep personal data only for as long as necessary.
• Integrity and confidentiality: We process personal data securely.

4. Data Subject Rights

Under POPIA, data subjects have the right to:

• Be notified that their personal information is being collected
• Be notified of any unauthorised access to their personal information
• Request access to their personal information
• Request correction or deletion of their personal information
• Object to the processing of their personal information

5. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

6. Data Breaches

In the event of a data breach, we will notify the Information Regulator and affected data subjects in accordance with POPIA requirements.

7. Contact Information

For any data protection queries, please contact us at hello@myall.co.za.