POPIA Compliance Notice
Jurisdiction: South Africa
1. Accountability
Subscribing organizations determine why and how their workforce and customer information is processed and should appoint responsible personnel, maintain processing records and configure access according to job duties.
2. Processing limitation
Only adequate, relevant and non-excessive information should be entered. Geolocation, photographs, identity and employment information require particular care, clear purpose definition and appropriate authorization.
3. Purpose, quality and openness
Organizations must inform affected people of the purpose of collection, keep information accurate and avoid reusing it incompatibly. KingDesk provides auditable workflows, tenant isolation and configurable permissions to support these duties.
4. Security safeguards
Controls include password hashing, CSRF protection, session expiry, role and privilege enforcement, organization-scoped queries, controlled file delivery, audit records, provider-secret encryption and maintenance processes. No control eliminates all risk; incidents must be assessed and escalated promptly.
5. Operator obligations
KingDesk processes entrusted information only to provide and secure the service, applies appropriate safeguards, restricts personnel access and supports the responsible party with incident and data-subject procedures as agreed.
6. Regulator and complaints
Concerns should first be submitted to the responsible organization or its Information Officer. A person may also approach the Information Regulator of South Africa using the regulator’s official channels.
Questions, complaints or data-subject requests should be submitted through the authenticated support channel or to the subscribing organization’s designated Information Officer. This public notice is general information and does not replace an organization-specific agreement or legal advice.