POPIA Notice

1. Accountability

Tru Payout is accountable for personal information under its control and maintains measures intended to give effect to POPIA's conditions for lawful processing. Our Information Officer oversees privacy compliance, requests, complaints, and incident coordination.

2. POPIA processing principles

• Lawfulness and minimality: information is processed for a lawful purpose and limited to what is adequate, relevant, and not excessive.
• Purpose specification: the purpose is identified when information is collected, and records are not retained longer than necessary.
• Further processing: later use must be compatible with the original purpose or otherwise permitted by law.
• Information quality: reasonable steps are taken to keep information complete, accurate, and updated where necessary.
• Openness: data subjects are informed about collection and processing through appropriate notices.
• Security safeguards: reasonable technical and organisational measures protect confidentiality and integrity.
• Data-subject participation: people may exercise access, correction, objection, and complaint rights.

3. Direct collection and notifications

Where reasonably practicable, personal information is collected directly from the data subject. Information may also be obtained from merchants, payment providers, banks, identity-verification services, public records, fraud-prevention sources, and authorised third parties where POPIA permits.

4. Operators and international transfers

Operators processing information for Tru Payout must establish and maintain appropriate safeguards and notify us of suspected unauthorised access. International transfers are made only when the recipient is subject to adequate protection, a binding agreement, consent, or another ground allowed by POPIA section 72.

5. Your POPIA rights

• Ask whether Tru Payout holds personal information about you.
• Request access to a record of your personal information.
• Request correction, deletion, or destruction where the statutory requirements are met.
• Object to processing on reasonable grounds or object to direct marketing.
• Withdraw consent where processing depends on consent.
• Lodge a complaint with the Information Regulator or pursue available legal remedies.

Some rights may be limited by legal duties, privilege, fraud prevention, contractual requirements, or permitted grounds for refusing access.

6. Requests and complaints

Send POPIA requests to the Tru Payout Information Officer at hello@trupayout.com. Describe the request and provide sufficient information for identity verification. Complaints may also be lodged with the Information Regulator at inforegulator.org.za.