POPIA Compliance
Last updated: December 2024
POPIA Compliance Notice
Radio Retail (Pty) Ltd is committed to complying with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This notice explains how we process your personal information in accordance with POPIA.
Responsible Party
Radio Retail (Pty) Ltd is the responsible party for the processing of personal information collected through this service.
Categories of Personal Information
We process the following categories of personal information:
- Identifiers: Device identifiers, IP addresses, user account names
- Technical Data: Device type, browser information, access logs
- Usage Information: Stream access times, playback data, service interactions
Purpose of Processing
We process personal information for the following purposes:
- Providing and maintaining the streaming service
- Device authentication and access management
- Service improvement and analytics
- Security monitoring and fraud prevention
- Compliance with legal obligations
Legal Basis for Processing
We process your personal information on the following grounds:
- Performance of a contract to which you are a party
- Compliance with legal obligations
- Legitimate interests pursued by us or a third party
- Your consent, where applicable
Data Subject Rights
Under POPIA, you have the right to:
- Access: Request confirmation of whether we hold personal information about you and access to such information
- Correction: Request correction or deletion of inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained personal information
- Deletion: Request the destruction or deletion of personal information that is no longer necessary
- Object: Object to the processing of your personal information on reasonable grounds
- Complaint: Lodge a complaint with the Information Regulator regarding an alleged infringement of your rights
Security Measures
We implement appropriate technical and organizational measures to secure personal information, including:
- Encryption of data in transit and at rest
- Access controls and authentication mechanisms
- Regular security assessments and monitoring
- Staff training on data protection
Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention period is 12 months for operational data, unless a longer period is required for legal or business purposes.
Cross-Border Transfers
We may transfer personal information outside South Africa to service providers who assist us in operating the Service. Such transfers are made in compliance with POPIA requirements and appropriate safeguards are in place.
Information Officer
Our designated Information Officer can be contacted for any POPIA-related queries:
Radio Retail (Pty) Ltd
Information Officer
Email: privacy@radioretail.co.za
Information Regulator
You may lodge a complaint with the Information Regulator:
Website: https://inforegulator.org.za
Email: complaints.IR@justice.gov.za