POPIA

Protection of Personal Information Act

For 360 Business Consulting (Pty) Ltd
Company Registration Number: 2021/691006/07

Introduction
Purpose of the POPIA Manual
Contact Details
POPIA Principles Applied by 360 Business Consulting (Pty) Ltd
Types of Personal Information Processed
Purpose for Processing Personal Information
Data Subject Rights
Security Measures
Retention of Records
Sharing of Personal Information
Procedure for Access Requests
Availability of the POPIA Manual

1. Introduction

The Protection of Personal Information Act (POPIA) aims to promote the protection of personal information processed by public and private bodies. It seeks to balance the right to privacy against other rights, including the right to access information.
360 Business Consulting (Pty) Ltd is committed to protecting the personal information it processes and ensures that it complies with POPIA and other applicable legislation.

2. Purpose of the POPIA Manual

This manual provides an outline of 360 Business Consulting (Pty) Ltd’s practices in collecting, processing, storing, and protecting personal information.
This document is intended to inform data subjects of their rights and the manner in which 360 Business Consulting (Pty) Ltd handles personal information in compliance with POPIA.

3. Contact details

Email Address: info@360business.consulting.net
Postal Address: 360 Business Consulting (Pty) Ltd
Telephone: 072 646 1428

4. POPIA Principles applied by 360 Business Consulting (Pty) Ltd

360 Business Consulting (Pty) Ltd adheres to the following POPIA principles:
1. Accountability: Ensuring compliance with POPIA.
2. Processing Limitation: Processing only what is necessary for lawful purposes.
3. Purpose Specification: Clearly defining the purpose for processing information.
4. Further Processing Limitation: Limiting further processing based on the initial purpose.
5. Information Quality: Ensuring personal information is complete, accurate, and updated.
6. Openness: Informing data subjects when collecting their information.
7. Security Safeguards: Implementing measures to secure personal information.
8. Data Subject Participation: Allowing data subjects to access, correct, and delete their information.

5. Types of personal information processed

360 Business Consulting (Pty) Ltd processes the following types of personal information:
1. Employee Information: Contact details, ID numbers, employment contracts, and bank details.
2. Client Information: Names, contact details, financial information, and records of services provided.
3. Training Information: Details on training programs and individuals trained by the company.
4. Marketing Information: Names and contact details of individuals and businesses interested in 360 Business Consulting (Pty) Ltd’s services.

6. Purpose for processing personal information

360 Business Consulting (Pty) Ltd processes personal information for the following purposes:
1. To provide consulting and training services to clients.
2. To administer human resources functions.
3. To manage client relationships and communication.
4. To fulfill legal obligations, such as tax and employment laws.
5. To conduct marketing activities, including newsletters and promotional offers.

7. Data subject rights

Data subjects have the following rights in terms of POPIA:
1. Right of Access: Access to their personal information held by 360 Business Consulting (Pty) Ltd.
2. Right to Correction or Deletion: Request corrections or deletion of inaccurate, irrelevant, or excessive information.
3. Right to Object: Object to the processing of personal information, including direct marketing.
4. Right to Withdraw Consent: Withdraw consent to process personal information.
5. Right to Complain: Lodge a complaint with the Information Regulator.
Data subjects wishing to exercise any of these rights may contact the Information Officer (contact details in Section 3).

8. Security measures

360 Business Consulting (Pty) Ltd implements the following security measures to protect personal information:
1. Access control measures, including passwords and secure access systems.
2. Regular security audits and assessments.
3. Encryption of sensitive data and secure backup procedures.
4. Physical security for paper-based records.
5. Training employees on information security and POPIA compliance.

9. Retention of records

Personal information is retained for as long as necessary to fulfill the purposes for which it was collected or as required by law.
Once the purpose has been fulfilled, or retention is no longer required, the personal information is securely deleted or destroyed.

10. Sharing of personal information

360 Business Consulting (Pty) Ltd may share personal information under the following conditions:
1. With third-party service providers who perform services on behalf of the company, provided they comply with POPIA.
2. When required by law or legal process.
3. With the consent of the data subject.
The company ensures that any third parties with whom personal information is shared are bound by confidentiality and POPIA-compliant agreements.

11. Procedure for access requests

Data subjects may request access to their personal information by submitting a formal request to the Information Officer (contact details in Section 3).
The request must include the data subject’s contact details, the information being requested, and the reason for the request.
A requester may be required to pay a fee for accessing records and will be informed of the applicable fees (if any) before processing the request.

12. Availability of the POPIA Manual

This manual is available for inspection at the offices of 360 Business Consulting (Pty) Ltd and is published on the company’s website.
A copy of this manual may also be requested from the Information Officer, and applicable fees may be charged for providing a hard copy.

This POPIA Manual outlines the commitment of 360 Business Consulting (Pty) Ltd to managing personal information responsibly and in accordance with South African legislation.