This policy explains how SAMDDRA collects and uses personal information through its public websites, member portal, applications and related services. It is intended to support transparent processing under South Africa’s Protection of Personal Information Act, 2013 (“POPIA”).
1. Responsible party
The South African Mobile Devices Distributors and Repairers Association (“SAMDDRA”) is the responsible party for personal information processed for the purposes described here. Privacy enquiries and requests may be sent to info@samddra.org.za.
2. Information we collect
Depending on how you use the Platform, we may collect:
- identity and contact details, such as names, email address, telephone number and address;
- account information, preferences, login and security records;
- identity and KYC information, including identification numbers, document images and verification outcomes;
- business, employment, professional, education, membership and certification information;
- applications, supporting documents, messages and support requests;
- invoice, payment status and transaction-reference information (not full payment-card credentials unless expressly stated);
- technical information such as IP address, device/browser information, timestamps and security logs; and
- communication and notification preferences.
We generally collect information directly from you. We may also receive it from an organisation you represent, authorised administrators, verification providers, payment/accounting providers, public records or other lawful sources.
3. Why we process information
- to create, secure and administer accounts;
- to assess membership, KYC, certification and programme applications;
- to provide membership services, benefits, support and communications;
- to issue and reconcile invoices and payments;
- to verify information, prevent fraud and protect the Platform;
- to maintain records, report appropriately and comply with legal obligations;
- to improve services and understand Platform performance; and
- to send marketing where permitted and honour opt-out choices.
4. Lawful grounds
We process information where it is necessary to perform or prepare for an agreement with you, comply with a legal obligation, pursue a legitimate interest that does not unjustifiably override your rights, protect a legitimate interest of you or another person, perform a public-law duty where applicable, or where you have consented. You may withdraw consent, but this does not affect earlier lawful processing.
5. Special personal information
Some documents may reveal special personal information. We process it only where POPIA permits, for a defined purpose, with appropriate safeguards, and only to the extent reasonably necessary. Please do not submit information that has not been requested.
6. Sharing
We may share relevant information with:
- authorised SAMDDRA employees, office bearers, reviewers and service administrators;
- hosting, software, email, security and support providers;
- payment, banking and accounting providers;
- identity, qualification or document-verification providers;
- professional advisers, auditors and insurers; and
- regulators, law-enforcement bodies or other recipients where disclosure is required or permitted by law.
Providers may process information only for authorised purposes and are expected to protect it appropriately. We do not sell personal information.
7. Cross-border processing
Some technology providers may store or process information outside South Africa. Where this occurs, we use providers and safeguards intended to meet POPIA’s requirements for transborder information flows.
8. Retention
We retain information only for as long as reasonably needed for the purpose collected, an active account or membership, dispute resolution, security, audit and applicable legal or regulatory requirements. When retention is no longer justified, information is securely deleted, destroyed or de-identified.
9. Security
We use reasonable organisational and technical safeguards designed to protect information against loss, unauthorised access, alteration, disclosure or destruction. No online system is completely secure. You must protect your password and notify us promptly of suspected account misuse.
10. Cookies and similar technologies
The Platform may use essential cookies for sessions, authentication, security and preferences. We may also use limited analytics technologies to understand service performance. Browser settings can restrict cookies, although blocking essential cookies may prevent login or other features from working.
11. Communications and direct marketing
Service messages about accounts, applications, security, invoices or memberships are not marketing. Where we send direct marketing by electronic communication, we do so as permitted by POPIA and provide a reasonable way to opt out. You can change preferences or contact us at any time.
12. Your rights
Subject to POPIA and applicable limitations, you may:
- ask whether we hold your personal information and request access;
- request correction, updating, deletion or destruction of inaccurate or unlawfully retained information;
- object to certain processing;
- withdraw consent where processing relies on consent;
- opt out of direct marketing; and
- complain to the Information Regulator.
We may need to verify your identity before acting on a request. Some information cannot be deleted immediately where law or legitimate record-keeping obligations require retention.
13. Children
The general account and membership services are not directed at children. Where a programme lawfully involves a child, we require appropriate authority and apply additional safeguards as required by POPIA.
14. Information Regulator
If we cannot resolve a privacy concern, you may lodge a complaint with the Information Regulator of South Africa through its official website at inforegulator.org.za.
15. Updates and contact
We may update this policy when our processing, services or legal obligations change. The latest revision date appears above. Contact info@samddra.org.za with privacy questions or requests.