Privacy notice

01Who we are

The Innovation Council Southern Africa, branded Innov8SA (“the Council”, “we”, “us”), is the responsible party for the personal information described in this notice.

Registered name: [registered name]
Registration number: [NPC registration number]
Registered address: [physical address]
Information Officer: [name], reachable at info@Innov8SA.org

This notice applies to this website and to the Council's dealings with members, prospective members, partners and correspondents.

02What we collect

We collect only what we need to respond to you and to run the Council.

Information you give us

• —Your name, organisation, role, email address and telephone number, submitted through the enquiry form or sent to us by email.
• —The content of your enquiry and any correspondence that follows.
• —Membership and participation records, including working group involvement and attendance at Council events.

Information collected automatically

• —Standard web server logs kept by our hosting provider, which include IP addresses, browser type, pages requested and timestamps. These are used for security and to keep the site running.
• —This site sets no advertising or tracking cookies. If we add analytics or cookies in future, we will update this notice and ask for consent where the law requires it.

We do not knowingly collect special personal information as defined in section 26 of POPIA, and we do not collect the personal information of children.

03Why we process it, and on what basis

• —To respond to your enquiry and to send you the founding member pack you asked for. Basis: your consent, and steps taken at your request before entering into an agreement.
• —To administer membership — registers, invoices, working group participation and voting at the annual assembly. Basis: performance of the membership agreement.
• —To keep members informed about Council business, submissions, research and events. Basis: legitimate interest as a membership body, with an unsubscribe option in every message.
• —To meet legal and governance obligations, including record-keeping under the Companies Act and POPIA itself. Basis: legal obligation.
• —To secure the website and prevent abuse. Basis: our legitimate interest.

Providing your information is voluntary. If you choose not to provide it, we simply cannot respond to your enquiry or process a membership application.

04Direct marketing

We will send electronic communications about the Council's work to members, and to non-members only where you have asked to hear from us or where section 69 of POPIA otherwise permits it. Every message carries a way to opt out, and an opt-out takes effect immediately. We do not sell or rent contact details to anyone.

05Who we share it with

We share personal information only where it is necessary, and only with:

• —Operators acting on our instruction — our hosting provider, email provider and, in time, membership and accounting systems. They process the information for us, under confidentiality obligations, and for no other purpose.
• —Professional advisers — auditors, attorneys and accountants, where the Council's governance requires it.
• —Authorities, where we are required by law to disclose.

We do not share member contact details with other members, sponsors or third parties without your agreement. Where the Council publishes research or sector statistics, it does so in aggregate form that does not identify individuals or firms without permission.

06Information sent outside South Africa

Some of the services this website relies on are operated abroad. The web fonts used on these pages are delivered by Google's content network, which means your browser's IP address reaches servers outside South Africa when a page loads. Cloud email and productivity services we use may also store data outside the country.

Where personal information is transferred across borders, we do so in terms of section 72 of POPIA — relying on recipients bound by comparable data protection standards, on contractual safeguards, or on your consent where neither applies.

07How long we keep it

• —Enquiries that do not lead to membership: up to 24 months, then deleted.
• —Membership records: for the duration of membership and for five years afterwards, to meet statutory record-keeping requirements.
• —Server logs: as retained by our hosting provider in the ordinary course, typically a matter of months.

We delete or de-identify personal information once the purpose it was collected for has been achieved, unless a law requires us to keep it longer.

08How we protect it

We take reasonable technical and organisational measures as required by section 19 of POPIA: the site is served over an encrypted connection, access to member records is limited to people who need it, accounts are protected by strong authentication, and our operators are bound by written confidentiality terms.

If a security compromise affects your personal information, we will notify you and the Information Regulator as soon as reasonably possible after establishing what happened, as section 22 requires.

09Your rights

Under POPIA you may:

• —Ask whether we hold personal information about you, and ask for a copy of it (sections 23 and 25).
• —Ask us to correct, update or delete information that is inaccurate, irrelevant, excessive, misleading or obtained unlawfully (section 24).
• —Object to processing we base on legitimate interest, on reasonable grounds (section 11(3)).
• —Withdraw consent at any time, without affecting processing that already took place.
• —Opt out of direct marketing at any time.
• —Complain to us, and to the Information Regulator, if you believe we have handled your information unlawfully.

Write to info@Innov8SA.org to exercise any of these. We respond within 30 days. We may ask you to verify your identity first, and requests for access to records under the Promotion of Access to Information Act follow the process in our PAIA manual.

10Complaining to the Regulator

We would prefer to resolve any concern with you directly, but you are entitled to approach the Information Regulator at any time.

11Changes to this notice

We review this notice at least once a year and whenever our processing changes materially. The version number and effective date at the top of the page tell you which version you are reading. Material changes will be communicated to members directly.

12Contact us

Questions about this notice, or about how we handle your information, go to the Information Officer at info@Innov8SA.org.