Speak to a Specialist: 0860 017 432 sales@lamusdesign.co.za Client Area Login

POPIA Policy

How Lamus Design complies with the Protection of Personal Information Act (POPIA), and how to exercise your rights.

Last updated: 31 July 2026

About this notice. This POPIA Policy sets out how Lamus Design complies with the Protection of Personal Information Act 4 of 2013. It sits alongside our Privacy Policy, which describes in detail what we collect and why.

1. Our commitment

Lamus Design is committed to protecting the personal information entrusted to us by clients, suppliers, employees and website visitors. We process personal information lawfully, reasonably and in a manner that does not infringe on your privacy, in line with the eight conditions for lawful processing set out in POPIA.

2. Information Officer

In terms of section 55 of the Act, Lamus Design has designated an Information Officer who is responsible for encouraging compliance with the conditions for lawful processing, dealing with requests made to us under the Act, and working with the Information Regulator.

3. The eight conditions for lawful processing

  • Accountability — we take responsibility for the personal information in our care.
  • Processing limitation — we only collect information we actually need, with your consent or where processing is necessary to deliver a service or meet a legal obligation.
  • Purpose specification — we collect information for a specific, lawful purpose, which we make clear at the point of collection.
  • Further processing limitation — we do not use your information for a new purpose that is incompatible with the one it was collected for.
  • Information quality — we take reasonable steps to keep the information we hold complete, accurate and current.
  • Openness — we tell you what we hold and why, through this notice and our Privacy Policy.
  • Security safeguards — we protect information with appropriate technical and organisational measures.
  • Data subject participation — you may ask what we hold about you, and ask us to correct or delete it.

4. What we process and why

The categories of personal information we process, and the reasons for each, are set out in full in our Privacy Policy. In summary we process contact and business details to quote for and deliver work, billing details to invoice and take payment, content you supply so that we can build your website, and website analytics so we can improve our own site.

5. Your rights as a data subject

Under sections 23, 24 and 11(3) of POPIA you have the right to:

  • Be told that we hold personal information about you, and what that information is.
  • Request a copy of that information, subject to the prescribed fee.
  • Ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully.
  • Object, on reasonable grounds, to the processing of your personal information.
  • Withdraw consent for direct marketing at any time.
  • Not be subject to a decision based solely on automated processing.

6. How to make a request

Send your request in writing to our Information Officer at sales@lamusdesign.co.za, using the Form 2 prescribed under the Promotion of Access to Information Act where a formal access request is being made. We will acknowledge your request and respond within a reasonable period, and in any event within the timeframes set by the Act.

7. Direct marketing

We only send marketing communications to clients and to people who have asked to hear from us. Every marketing message includes a way to opt out, and we act on opt‑out requests promptly.

8. Operators and third parties

Where we use an operator — for example a hosting provider, email platform or payment processor — we put a written agreement in place requiring them to maintain appropriate security and to process information only on our instructions.

9. Security compromises

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and the affected data subjects as soon as reasonably possible, as required by section 22 of the Act.

10. Complaints

If you are not satisfied with how we have handled your personal information, please raise it with our Information Officer first so we can put it right. You also have the right to lodge a complaint with the Information Regulator of South Africa:

11. Review

This Policy is reviewed periodically and updated whenever our processing activities or the law changes.

Contact us

If you have any questions about this POPIA Policy, please get in touch: