POPIA Compliance Policy

1. Commitment to POPIA

HOSTMYWEBCLOUD SOUTH AFRICA (Pty) Ltd fully complies with the Protection of Personal Information Act 4 of 2013 (POPIA). We are committed to safeguarding the constitutional right to privacy by protecting personal information processed across our cloud hosting infrastructure, client portals, and administrative operations.

2. The Eight Conditions for Lawful Processing

We strictly adhere to the eight core principles prescribed by POPIA for processing personal information:

• Accountability: We ensure full operational compliance with statutory regulations during all data collection and storage activities.
• Processing Limitation: Personal data is processed lawfully, minimally, and strictly with your direct consent or valid legal grounds.
• Purpose Specification: Data is collected only for explicit, defined purposes relating to web hosting, cloud services, and domain registration.
• Further Processing Limitation: Subsequent data utilization is restricted to actions aligned with the original collection purpose.
• Information Quality: Reasonable procedures are implemented to keep client records accurate and up to date.
• Openness: Full transparency is maintained regarding collected data types and destination registry submissions.
• Security Safeguards: High-grade encryption, firewalls, access controls, and security measures protect against unauthorized processing.
• Data Subject Participation: Clients maintain the statutory right to request access, updates, or deletion of their personal records.

3. Role as Responsible Party vs. Operator

Under POPIA definitions, HostMyWebCloud acts as:

• Responsible Party: For client account records, billing details, and communication preferences.
• Operator: When hosting subscriber websites, databases, or cloud infrastructure where clients control end-user data.

4. Data Breach Notifications

In the event of an identified security compromise or unauthorized access to personal information, HostMyWebCloud will promptly notify both the South African Information Regulator and affected data subjects as required under Section 22 of POPIA.

5. Information Officer & Requests

Data subjects may exercise their POPIA rights to access, correct, or request the erasure of personal information held by our organization. Please direct all privacy inquiries or formal POPIA requests to our designated Information Officer:

Submit a POPIA / Privacy Request Ticket