POPIA Notice

Legal

General POPIA Notice

Last updated: 30 July 2026

Review before publishing. This document is a professional starting point tailored to FicMe. Bracketed placeholders (e.g. company name, Information Officer, address) must be completed and the final wording should be reviewed by a South African attorney before it is relied on.

1. Introduction

FicMe (Pty) Ltd ("FicMe", "we", "our" or "us") is committed to protecting the privacy of all persons whose personal information is processed through the FicMe platform and to complying with the Protection of Personal Information Act, 4 of 2013 ("POPIA"), the Financial Intelligence Centre Act, 38 of 2001 ("FICA"), and all other applicable legislation.

This POPIA Notice provides a general overview of FicMe's commitment to lawful and responsible processing of personal information. It should be read together with our:

  • General Privacy Statement, which incorporates our comprehensive privacy notice contemplated in section 18 of POPIA and explains how personal information is collected, processed, shared, retained and protected; and

  • Core Privacy Policy, which contains detailed information regarding the operation of the FicMe platform, the processing of personal information, the respective responsibilities of FicMe, users and accountable institutions, and the rights and obligations of all persons using the platform.

In the event of any inconsistency between this POPIA Notice and either the General Privacy Statement or the Core Privacy Policy, the latter documents shall prevail to the extent of such inconsistency.

2. Our Commitment to POPIA

FicMe is committed to processing personal information lawfully, reasonably and responsibly and to giving effect to the conditions for the lawful processing of personal information prescribed by POPIA. In particular, FicMe is committed to:

  • ensuring that personal information is processed in accordance with the eight conditions for lawful processing under POPIA, namely:-

    • accountability,

    • processing limitation,

    • purpose specification,

    • further processing limitation,

    • information quality,

    • openness,

    • security safeguards, and

    • data subject participation;

  • processing personal information only where there is an appropriate lawful basis for doing so;

  • collecting and processing personal information only for legitimate, specific and lawful purposes;

  • implementing appropriate technical and organisational measures to safeguard personal information against loss, unauthorised access, disclosure, alteration or destruction;

  • maintaining appropriate governance measures to ensure ongoing compliance with POPIA;

  • respecting and facilitating the statutory rights of data subjects; and

  • maintaining transparency regarding the manner in which personal information is processed.

3. Information Officer

FicMe has appointed an Information Officer in accordance with POPIA who is responsible for overseeing compliance with applicable data protection legislation and dealing with requests, enquiries and complaints relating to the processing of personal information.

Information Officer: ………………………………………………..

Email: [privacy@ficme.app]

Physical Address: ………………………………………………..

4. Rights of Data Subjects

Subject to POPIA and any other applicable legislation, data subjects may exercise various rights in relation to their personal information, including the right to:

  • be informed regarding the processing of their personal information;

  • request access to personal information held by FicMe;

  • request the correction, updating or deletion of personal information where appropriate;

  • object to certain forms of processing;

  • withdraw consent where processing is based on consent, without affecting the lawfulness of processing undertaken before such withdrawal; and

  • lodge a complaint with the Information Regulator.

The manner in which these rights may be exercised is described in detail in the General Privacy Statement.

5. Information Regulator

Any person who believes that FicMe has processed personal information contrary to POPIA may contact the Information Regulator of South Africa.

The contact details of the Information Regulator are available from the Information Regulator's official website.

6. Related Documents

This POPIA Notice forms part of FicMe's broader privacy governance framework and should be read together with the following documents:

  • General Privacy Statement;

  • Core Privacy Policy;

  • PAIA Manual;

  • Cookie Policy (where applicable); and

  • Terms and Conditions of Use.

Copies of these documents are available on the FicMe website or may be requested from the Information Officer.