POPIA Notice

Effective date: 10 July 2026  ·  Last updated: 10 July 2026

This notice explains how Neutrinori (Pty) Ltd complies with the Protection of Personal Information Act 4 of 2013 ("POPIA") and sets out your rights as a data subject. It supplements our Privacy Policy.

1. Responsible party

Where we process the personal information of a client's employees in order to deliver payroll and statutory submission services, we do so as an operator on behalf of that client, who remains the responsible party for that information.

2. Our commitment to the eight conditions for lawful processing

• Accountability. Our Information Officer is responsible for POPIA compliance across the business.
• Processing limitation. We collect and process personal information lawfully, minimally and, where required, with your consent or another lawful basis.
• Purpose specification. We collect personal information for the specific, defined purposes set out in our Privacy Policy and do not keep it longer than necessary.
• Further processing limitation. We do not use personal information for new purposes that are incompatible with the purpose it was collected for.
• Information quality. We take reasonable steps to keep personal information complete, accurate and up to date.
• Openness. This notice and our Privacy Policy describe our processing openly. You may ask us at any time what information we hold about you.
• Security safeguards. We apply reasonable technical and organisational measures to secure personal information, and we require the same of our operators and service providers.
• Data subject participation. You may access, correct and, where appropriate, request deletion of your personal information as described below.

3. Special personal information and children

We do not intentionally collect special personal information (such as health, biometric or religious information) or the personal information of children unless it is necessary for a service, permitted by POPIA and handled with additional care. Payroll processing can involve limited special personal information, for example medical aid deductions, which we process only as far as needed to run payroll correctly.

4. Your rights as a data subject

Under POPIA you have the right to:

• Be notified when your personal information is collected or has been accessed by an unauthorised person.
• Ask whether we hold personal information about you and request access to it.
• Request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained.
• Object on reasonable grounds to the processing of your personal information.
• Object to direct marketing, and opt out of any marketing communications at any time.
• Not be subject to a decision based solely on automated processing that has legal consequences for you.
• Complain to the Information Regulator.

5. How to exercise your rights

Send your request to our Information Officer at info@neutrinori.co.za with the subject line "POPIA Request". To protect your information we will verify your identity before acting on a request. We respond to requests within a reasonable time and in any event within the periods required by POPIA and, where applicable, the Promotion of Access to Information Act ("PAIA").

6. The Information Regulator

If you believe we have processed your personal information in a way that does not comply with POPIA, you have the right to lodge a complaint with the Information Regulator (South Africa):

7. Security compromise notification

If personal information in our care is accessed or acquired by an unauthorised person, we will notify the Information Regulator and the affected data subjects as soon as reasonably possible, as required by section 22 of POPIA.

8. Updates to this notice

We review this notice regularly and will publish any updated version on this page with a new effective date.