POPIA Compliance Notice

1. Designation of Information Officer

In terms of Sections 55 and 56 of POPIA, Candibean has designated an Information Officer responsible for regulatory compliance and data subject rights administration:

• Responsible Entity: Candibean (Pty) Ltd
• Designated Information Officer: Legal & Regulatory Officer
• Official Compliance Email: info@candibean.co.za
• Support Email: support@candibean.co.za
• Registered Jurisdiction: Johannesburg, Gauteng, Republic of South Africa

2. Adherence to the 8 POPIA Conditions

• Condition 1 (Accountability): Candibean ensures that all processing practices and security measures adhere strictly to statutory provisions.
• Condition 2 (Processing Limitation): Personal information is obtained lawfully, transparently, and with explicit consent. Only minimal necessary information is collected.
• Condition 3 (Purpose Specification): Data is collected specifically to administer user entertainment wallets, issue event tickets, verify check-in QR codes, and disburse partner vouchers.
• Condition 4 (Further Processing Limitation): Data is not repurposed or sold to third-party data brokers.
• Condition 5 (Information Quality): Users have the ability to review and update profile details inside the app at any time.
• Condition 6 (Openness): Full transparency through our accessible Privacy Policy and POPIA documentation.
• Condition 7 (Security Safeguards): Enterprise AES-256 encryption in transit and at rest, secure Google Cloud infrastructure, and strict access controls.
• Condition 8 (Data Subject Participation): Clear mechanisms for data access, correction, and account deletion.

3. Exercising Your Rights (Form 1 & Form 2)

Under Sections 11, 23, and 24 of POPIA, you are entitled to:

• Form 1 (Objection): Object on reasonable grounds to the processing of your personal information.
• Form 2 (Correction/Deletion): Request correction of inaccurate information or deletion of personal data.

To submit a formal request, email our Information Officer at info@candibean.co.za (copying support@candibean.co.za) with the subject line "POPIA Data Subject Request".

4. Direct In-App & Web Erasure

You do not need to submit manual paperwork to erase your profile. Users may initiate instant account deactivation:

• Directly inside the app via Profile → Delete Account.
• Online via our self-service Account Deletion Request Portal.

5. Lodging a Complaint with the Information Regulator

If you believe your personal information has been handled in breach of POPIA, you retain the statutory right to lodge a complaint directly with the Information Regulator of South Africa: