Prepared for demonstration only. Not an approved legal notice or a claim of POPIA compliance.
Draft version · 13 October 2026The proposed operator is Fin-Path (fin-path.co.za), a demonstration project identity. The legal responsible party, Information Officer, business address and privacy contact have not been confirmed. These details must be supplied and approved before launch. Do not submit real personal information to this prototype.
A future approved service may collect first name, surname, mobile number, optional email, contact preferences, enquiry categories, a short optional message and separate consent records. Its purpose would be to respond to an enquiry and, where appropriate, facilitate an approved referral. Identity numbers, account details, passwords, PINs, OTPs, medical histories and documents must not be collected here.
The appropriate lawful basis and live notice must be reviewed before processing begins. Service-related contact consent and optional future marketing consent must remain separate and unchecked by default. Consent must be informed, specific and recorded through an approved process. This draft does not establish legal compliance.
No information is sent to a provider in this prototype. Future recipients, the initial follow-up team and appropriately authorized representatives must be identified before launch. Referral terms, recipient safeguards and any sharing arrangements require approval and clear disclosure.
No submitted enquiry is persisted in this prototype. Future retention periods, deletion schedules, legal retention exceptions and secure disposal procedures remain to be approved. Retain only what is necessary for the disclosed purpose.
The prototype has no production authentication or lead storage. Future security requirements include appropriate access controls, secure transmission and storage, staff training and incident response. Any hosting, CRM or other processor must be reviewed with suitable agreements. No external lead integrations are implemented.
Where applicable, individuals may request access to, correction of or deletion of information, object to processing or direct marketing, and withdraw consent. A verified and accessible request process and responsible privacy contact must be established before launch. Withdrawal does not affect prior lawful processing.
Optional marketing consent is not required for an enquiry. A future approved service must provide a practical opt-out in its communications and maintain suppression records. The approved privacy contact and withdrawal channels remain to be confirmed. This prototype sends no messages.
An internal privacy complaint channel must be provided before launch. Individuals may also approach the Information Regulator (South Africa). Official information and current complaint instructions are available at inforegulator.org.za/contact-us/. General enquiries: enquiries@inforegulator.org.za, telephone 010 023 5200. POPIA complaints: POPIAComplaints@inforegulator.org.za; PAIA complaints: PAIAComplaints@inforegulator.org.za. Confirm current contacts and required complaint forms with the Regulator before approving the live notice.
Information Regulator official website ↗No optional analytics, advertising pixels, marketing cookies or advertising identifiers are added to this prototype. No browser storage is used for enquiry details. Hosting infrastructure may maintain essential operational logs; these must be reviewed and disclosed before live use. A separate cookie notice and consent controls will be needed if applicable technologies are introduced. Any third-party processors or cross-border transfers must be identified, assessed and disclosed before launch.
Live responsible-party details, contact channels, recipients and legal wording remain unconfirmed. No real enquiries may be accepted until approval.