South Africa Privacy Policy

Introduction

DolRise is a global digital platform built on principles of dignity, accountability, and responsible technology. This South Africa Privacy Policy explains how DolRise collects, uses, stores, and protects personal information relating to individuals located in South Africa, in accordance with the Protection of Personal Information Act, 2013 (POPIA).

DolRise recognises that personal information reflects individual identity, context, and trust. For this reason, DolRise processes personal information in a lawful and transparent manner, with respect for the rights of data subjects and in line with the conditions set out under POPIA.

This policy applies where DolRise acts as a responsible party and determines the purpose and means of processing personal information. Where DolRise processes personal information on behalf of another organisation, such processing is carried out only in accordance with lawful instructions and applicable safeguards.

DolRise processes personal information only for specific, explicitly defined, and lawful purposes connected to the operation, safety, and integrity of the DolRise platform. Personal information is not collected or used in a manner that is excessive, misleading, or harmful.

This South Africa Privacy Policy should be read together with the DolRise Global Privacy Policy. The Global Privacy Policy sets out baseline privacy commitments applicable worldwide. Where South African law provides additional or specific protections, this policy applies to individuals located in South Africa.

DolRise may make use of global technical infrastructure, including cloud-based services, security systems, and payment providers. Where personal information is processed outside South Africa, DolRise applies safeguards to ensure that such information continues to receive protection consistent with POPIA.

Certain categories of personal information, including identity verification data and financial information, are processed only where necessary and are protected through encryption, access controls, and strict internal governance measures.

This policy reflects DolRise’s commitment to lawful processing, user dignity, and accountability under South African data protection law.

Scope & Lawful Processing Conditions

This South Africa Privacy Policy applies to the processing of personal information by DolRise relating to individuals located in South Africa, where such processing is subject to the Protection of Personal Information Act, 2013 (POPIA).

DolRise processes personal information only where one or more lawful grounds apply, as required under POPIA. Such grounds may include consent from the data subject, performance of a contract, compliance with a legal obligation, or processing that is necessary to pursue a legitimate interest and does not unjustifiably infringe the rights of the data subject.

Personal information is collected directly from individuals wherever reasonably practicable. Where information is obtained from third parties, DolRise ensures that such collection is lawful and that the individual is informed where required.

DolRise limits the processing of personal information to specific, explicitly defined, and lawful purposes related to the operation, security, integrity, and improvement of the DolRise platform.

Personal information is processed in a manner that is adequate, relevant, and not excessive in relation to the stated purposes, and DolRise does not process personal information in a way that is misleading, intrusive, or harmful.

Where consent is relied upon as the lawful basis for processing, individuals may withdraw such consent at any time, subject to applicable legal or contractual restrictions.

DolRise does not process personal information for purposes that are incompatible with the original purpose of collection unless such further processing is permitted under POPIA or required by law.

Data Subject Rights

In accordance with the Protection of Personal Information Act, 2013 (POPIA), individuals located in South Africa (“data subjects”) are entitled to certain rights in relation to their personal information processed by DolRise.

Subject to applicable legal requirements and limitations, data subjects have the right to:

• Request confirmation as to whether DolRise holds personal information relating to them;
• Request access to personal information held by DolRise, including information about the source of such data and how it has been used;
• Request the correction, updating, or deletion of personal information that is inaccurate, incomplete, misleading, or unlawfully processed;
• Object to the processing of personal information on reasonable grounds, including where processing is carried out for direct marketing purposes;
• Withdraw consent to the processing of personal information, where consent is relied upon as the lawful basis, subject to applicable legal or contractual restrictions;
• Submit a complaint to DolRise regarding the handling of personal information.

DolRise will take reasonable steps to verify the identity of a data subject before responding to any request relating to personal information.

Requests may be refused or limited where permitted under POPIA, including where compliance would infringe the rights of another individual, compromise security, or conflict with legal obligations.

Requests relating to data subject rights may be submitted by contacting DolRise using the contact details provided in this policy.

Security Safeguards & Retention of Personal Information

DolRise implements appropriate technical and organisational measures to safeguard personal information in its possession or under its control against loss, damage, unauthorised destruction, and unlawful access or processing, as required under the Protection of Personal Information Act, 2013 (POPIA).

Security measures may include encryption of sensitive personal information, role-based access controls, secure authentication mechanisms, logging and monitoring of access, and regular review of security practices.

Personal information that is particularly sensitive in nature, such as identity verification data, financial information, and account credentials, is subject to enhanced safeguards and restricted access.

DolRise retains personal information only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law.

When personal information is no longer required for lawful or operational purposes, DolRise takes reasonable steps to securely delete, anonymise, or otherwise dispose of such information in a manner that prevents unauthorised access or recovery.

DolRise periodically reviews its retention practices and security safeguards to ensure continued compliance with POPIA and to address evolving technical, operational, and regulatory risks.

Cross-Border Transfers of Personal Information

DolRise may transfer personal information outside the Republic of South Africa as part of its global operations, including for purposes such as cloud hosting, security monitoring, payment processing, customer support, and system reliability.

Where personal information is transferred to a recipient in a foreign country, DolRise ensures that such transfer is carried out in compliance with the Protection of Personal Information Act, 2013 (POPIA).

In particular, DolRise takes reasonable steps to ensure that the recipient of the personal information is subject to laws, binding corporate rules, or contractual obligations that provide a level of protection substantially similar to that provided under POPIA.

Where required by law, DolRise will obtain the consent of the data subject before transferring personal information outside South Africa, unless such transfer is permitted under POPIA without consent.

DolRise does not transfer personal information to jurisdictions where adequate safeguards cannot reasonably be ensured, except where such transfer is necessary for the performance of a contract with the data subject or required by law.

All cross-border transfers are subject to appropriate technical and organisational safeguards designed to protect personal information against unauthorised access, misuse, or loss.

Contact Information & Complaints

DolRise is committed to addressing questions, concerns, and complaints relating to the processing of personal information in a transparent, fair, and timely manner.

Individuals located in South Africa may contact DolRise regarding matters related to personal information, including requests to exercise data subject rights, concerns about compliance with the Protection of Personal Information Act, 2013 (POPIA), or general inquiries about data protection practices.

DolRise may be contacted using the following details:

Email: [email protected]

DolRise will make reasonable efforts to acknowledge and respond to data protection-related inquiries and complaints within a reasonable timeframe.

If a data subject believes that DolRise has not adequately addressed a concern, they may lodge a complaint with the Information Regulator of South Africa in accordance with applicable law.