POPIA COMPLIANCE STATEMENT

What is POPIA?

The Protection of Personal Information Act No. 4 of 2013 (POPIA) is South Africa's data privacy law. It is designed to protect personal information and promote the constitutional right to privacy. POPIA requires businesses to process personal information lawfully and responsibly, in line with international best practices.

The Act came into effect in phases, with full compliance required by 1 July 2021.

POPIA aims to:

• Regulate the processing of personal information.
• Promote transparency and accountability in the use of personal information.
• Balance the right to privacy with other rights, such as access to information.

Responsible Parties and Operators

Under POPIA:

• A responsible party determines the purpose and means of processing personal information.
• An operator processes personal information on behalf of a responsible party, under contract.

In context:

• You, the Customer (domestic worker employer), are the responsible party for the personal information of your employees (the data subjects).
• MyHelper (Pty) Ltd acts as an operator, processing your employees' information to help you meet your legal and payroll obligations.

Lawful Processing of Personal Information

Personal information refers to any data that identifies a person, including names, addresses, ID numbers, and banking details.

MyHelper processes personal information strictly in accordance with the eight lawful processing conditions outlined in Chapter 3 of POPIA:

1. Accountability
2. Processing Limitation
3. Purpose Specification
4. Further Processing Limitation
5. Information Quality
6. Openness
7. Security Safeguards
8. Data Subject Participation

Rights of Data Subjects

Under POPIA, data subjects (e.g. domestic workers) have the right to:

• Access their personal information.
• Correct or update personal information.
• Be notified about the collection and processing of their information.
• Object to processing in certain situations.
• Request deletion of personal information (where lawful).

If a data subject believes their rights have been infringed, they may lodge a complaint with the Information Regulator of South Africa using the relevant form available on https://inforegulator.org.za/

POPIA and MyHelper

At MyHelper, protecting your data and the privacy of your employees is foundational to how we operate. We only process your employees' data:

• With your consent.
• For clearly defined purposes (e.g. generating payslips, submitting UIF declarations, managing leave, drafting employment contracts).

The types of personal information MyHelper may process include:

• Full name, ID number, date of birth, and gender.
• Physical and email addresses.
• Bank account details.
• Employment and salary records.
• Leave balances and UIF status.

We are committed to:

• Processing information only on the instructions of you, the responsible party.
• Confidentiality – treating personal information as private and secure.
• Security – using industry-standard measures (such as encryption, secure servers, and two-factor authentication) to protect data from unauthorised access.

Our Information Officer

In terms of POPIA, MyHelper has appointed an Information Officer to oversee and ensure POPIA compliance.

If you have any POPIA-related queries, please contact Mario at the above address.

Additional POPIA Measures by MyHelper

• POPIA Registration: MyHelper (Pty) Ltd has registered its Information Officer with the Information Regulator.
• Privacy Policies: Our Privacy Policy and Security Statement provide detailed information on how we handle data.
• Special Personal Information: In limited cases, where required by law (e.g. for UIF submissions), MyHelper may process special personal information such as race. This is done with your (and your employees') informed consent.

Conclusion

MyHelper is committed to helping you stay POPIA-compliant while using our platform to manage your domestic worker obligations efficiently and lawfully. We process personal information solely to support you in this role, and always with your and your employees' privacy in mind.

For further details, please consult our:

• Privacy Policy
• Terms of Service
• Security Statement