Legal
POPIA Notice
Our notice under section 18 of the Protection of Personal Information Act, 2013.
Last updated: August 2026
Responsible party
GoTo Communications (Pty) Ltd, Bloemfontein, Free State, South Africa. Information Officer: admin@gotocommunications.co.za.
Information we process and why
| Information | Purpose | Lawful basis |
|---|---|---|
| Name, organisation, email, telephone | Responding to enquiries and delivering services | Consent and performance of a contract |
| Enquiry content and sector | Understanding your requirements and scoping work | Consent and legitimate interest |
| Email address (newsletter) | Sending the communications you subscribed to | Consent |
| IP address and request metadata | Security, abuse prevention and rate limiting | Legitimate interest |
| Billing and engagement records | Invoicing, accounting and statutory record keeping | Legal obligation |
Whether supply is voluntary
Supplying your information is voluntary. If you choose not to supply the fields marked as required on our forms, we will not be able to respond to your enquiry.
Recipients
Operators processing on our behalf under written contract: our hosting and security provider, our email delivery provider, and our scheduling provider. Where processing occurs outside South Africa, we rely on providers subject to comparable data protection obligations.
Retention
Enquiry records: up to three years from last contact. Newsletter records: until you unsubscribe. Financial records: as required by the Companies Act and the Tax Administration Act. Security logs: a short operational period.
Your rights under POPIA
- To be told what personal information we hold about you.
- To request correction, deletion or destruction of inaccurate, irrelevant, excessive or outdated information.
- To object to processing on reasonable grounds.
- To withdraw consent at any time, without affecting prior lawful processing.
- To complain to the Information Regulator.
Requests may be made using Form 2 or Form 3 of the POPIA Regulations, sent to our Information Officer. We do not charge for reasonable requests.
Security safeguards
We apply technical and organisational measures appropriate to the risk: encryption in transit, bot verification, input validation, rate limiting, access control and secure storage. If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22.
Information Regulator
Information Regulator (South Africa)
complaints.IR@justice.gov.za
inforegulator.org.za