Legal

POPIA and Data Protection

Last updated 11 October 2026

Our Information Officer

Bhekizenzo Mehlwana
Information Officer, Fin-Uwezo (Pty) Ltd
99 6th Avenue, Highlands North, Johannesburg, South Africa
skhu@fin-uwezo.co.za

Why we process personal information

We process personal information on the following lawful bases under section 11 of the Protection of Personal Information Act, 2013:

• Consent. Every employee gives written informed consent before a consultation begins. Consent may be withdrawn at any time.
• Performance of a contract. Delivering and coordinating the clinics and programmes our clients have engaged us for.
• Legitimate interests. Responding to an enquiry you send us through this website.
• Legal obligation. Where a law or a regulator requires us to keep or produce records.

Special personal information

A consultation may touch on health, financial or family circumstances. Where that is the case it is processed with your express written consent, by a registered professional bound by their own professional body's confidentiality obligations, and it is not shared with your employer.

Your rights under POPIA

• Be told what personal information we hold about you and who has had access to it.
• Ask us to correct, complete or delete information that is inaccurate, irrelevant, excessive, out of date, misleading or unlawfully obtained.
• Object, on reasonable grounds, to our processing of your information.
• Withdraw consent you previously gave, without affecting processing that already took place.
• Complain to the Information Regulator.

How to make a request

Email the Information Officer at skhu@fin-uwezo.co.za with the words "POPIA request" in the subject line, and enough detail for us to identify you and the information you are asking about. We will acknowledge within 5 working days and respond within the period the Act allows. A formal request for access to a record is made on Form 2 under the Promotion of Access to Information Act, 2000, and a prescribed fee may apply.

Security compromises

If personal information under our control is accessed or acquired by an unauthorised person, we will notify the Information Regulator and the affected people as soon as reasonably possible after establishing what happened, as section 22 requires.

Cross-border transfers

Our website and email are hosted in South Africa. Where a service provider processes information outside the Republic, we require protection substantially similar to that required by POPIA.

The Information Regulator

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
enquiries@inforegulator.org.za
inforegulator.org.za

See also our Privacy Policy and Terms of Use.