POPIA and your family (draft)

Children's information

POPIA (sections 34 and 35) allows a child's personal information to be processed with the consent of a competent person, usually the parent or legal guardian. Selemo asks for that consent before it stores anything about a child, and records it in an append-only consent ledger.

The conditions for lawful processing, in practice

Accountability: Selemo will register an Information Officer with the Information Regulator before launch.
Processing limitation: we keep only what the work needs, and nothing about a child without consent.
Purpose specification: information is used to plan, teach, keep evidence and show progress, and for nothing else.
Further processing: we do not reuse a family's information for other purposes, such as advertising.
Information quality: you can correct your household's information at any time.
Openness: this notice and the PAIA manual describe what we hold and why.
Security safeguards: information is encrypted in transit and at rest, households are separated by database rules that the application cannot bypass, and photo links expire within minutes.
Data subject participation: you can see, export or delete everything, and withdraw any consent.

Information leaving South Africa

Primary data and media are stored in South Africa. The only information that leaves the country is pseudonymised text for Gogo and Selemo's decision checks, and only under the separate consent for help from Gogo. Before launch, Selemo will assess whether prior authorisation from the Information Regulator is needed for this processing.

Operators

Where another company processes information for us (hosting, email delivery, payments), it does so under a written operator agreement that requires it to keep the information secure and use it only for our purposes.

Your rights

To know what information we hold about you and your child.
To have it corrected or deleted.
To object to processing and to withdraw consent.
To complain to the Information Regulator.