Legal

POPIA Policy

Last updated: 30 June 2026

Tech for Good Advisory (Pty) Ltd, trading as Tech for Good Advisory SA, processes personal information of clients, prospective clients, and the people who represent them, in the course of providing nonprofit technology, email, AI and hardware services. This policy sets out how we meet our obligations under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1. Responsible party

Tech for Good Advisory (Pty) Ltd is the Responsible Party for personal information processed through this website and our services, as defined by POPIA.

2. What counts as personal information

Under POPIA, personal information includes any information that can identify a person or organisation’s representative, such as: name and contact details; organisation name and registration details; information submitted via our assessment or contact forms; device and delivery details for hardware orders; and, where relevant to a service, financial or billing information.

3. How we collect it

• Directly from you — when you complete our website contact/assessment form, request a hardware quote, or correspond with us by email, phone or WhatsApp;
• Automatically — limited technical data needed to keep the website running properly (see our Privacy Policy);
• From your organisation — documents you choose to share to help us assess eligibility for nonprofit software benefits, such as registration certificates.

4. Why we process it

We process personal information to assess and apply for nonprofit software benefits on your behalf, set up and support email, AI and website services, prepare and fulfil hardware purchase or rental quotes, communicate with you about your request or engagement, and meet our legal and accounting obligations.

5. Lawful basis

We rely on one or more of the following grounds recognised by POPIA: your consent (for example, submitting our contact form); the necessity of processing to perform a contract with you or your organisation; compliance with a legal obligation; and our legitimate interests in running and improving our services, balanced against your rights.

6. Sharing of information

We do not sell personal information. We may share it with service providers who help us deliver our work — such as our email-delivery provider, hosting provider, and ICT distribution/hardware partners — strictly for the purpose of that service, and, where required, with regulators or authorities under a legal obligation.

7. Security safeguards

We apply reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration or disclosure, including restricted access to client information and use of reputable, security-conscious infrastructure and email providers.

8. Retention

We retain personal information only for as long as necessary for the purpose it was collected, or as required by law (for example, financial records), after which it is securely deleted or anonymised.

9. Your rights as a data subject

Subject to POPIA, you have the right to: be notified that your personal information is being collected; access the personal information we hold about you; request correction or deletion of personal information; object to processing of your personal information, including for direct marketing; and withdraw consent, where consent is the basis for processing, without affecting processing that already took place.

To exercise any of these rights, please contact our Information Officer using the details below.

10. Information Officer

11. Complaints

If you believe we have not handled your personal information in line with POPIA, you may contact our Information Officer first, or lodge a complaint with the Information Regulator (South Africa) at www.justice.gov.za/inforeg.

12. Updates to this policy

We may update this policy as our practices or the law change. The “last updated” date above shows the current version.