POPIA Compliance Statement

Last updated: 2026-08-02

Urban Farming SA is committed to processing personal information lawfully, reasonably, and securely in line with the Protection of Personal Information Act, 2013 (POPIA) and the conditions for lawful processing.

This statement summarises our approach. Full detail is in our Privacy Policy. It is not legal advice.

1. Responsible party and Information Officer

• Responsible party (trading as): Urban Farming SA
• Physical address: 03 Lovedale Avenue, Silverfields, Krugersdorp, 1739, South Africa
• Information Officer: Pieter Venter
• Email: info@urbanfarmingsa.co.za

Direct POPIA and PAIA requests to the Information Officer. We aim to respond within a reasonable time (generally 30 days), subject to verification of identity and any lawful grounds to refuse or extend.

2. Purposes of processing

We process personal information to:

• Operate buyer and farmer accounts on the marketplace
• Fulfil collection orders and digital e-book delivery
• Pay farmers and keep accounting records
• Prevent fraud, abuse, and duplicate payouts
• Send transactional notifications (email / WhatsApp)
• Meet legal and regulatory duties

Farmer bank and payout details are used only for remittances, reconciliation, and related compliance — not for unrelated marketing.

3. Lawful processing

We process personal information where a POPIA basis applies — typically contract performance, legitimate interests that do not override your rights, legal obligation, or consent for optional analytics / marketing. We do not rely on bundled "browse equals consent" for all processing.

4. Your rights

• Request confirmation whether we hold your personal information and request access
• Request correction or deletion
• Object to processing where POPIA allows
• Withdraw consent where consent is the basis relied upon
• Lodge a complaint with the Information Regulator (South Africa)

Information Regulator: inforegulator.org.za
Complaints / enquiries channels published on the Regulator's website apply.

5. Operators and security

We use operators such as hosting, database, payment, email, and messaging providers under arrangements that require appropriate protection of personal information. We apply measures including HTTPS, role-based admin access, database row-level security, and private storage for paid digital files.

6. Cross-border transfers

Where operators process information outside South Africa, we seek to comply with POPIA section 72 by using providers and contractual or other safeguards that aim to ensure adequate protection for the information transferred.

7. Retention and deletion

We keep information only as long as needed for the purposes above and for legal / accounting retention. When no longer required, we delete or anonymise it where practicable. See retention guidance in the Privacy Policy.

8. Security compromises

If a security compromise affecting personal information creates a risk of harm, we will notify the Information Regulator and affected persons as required by POPIA and take reasonable containment steps.

9. PAIA

Requests for access to records may also arise under the Promotion of Access to Information Act, 2000 (PAIA). Contact the Information Officer. If we are required to publish a PAIA manual, details will be made available on request or on this website when finalised.

10. Contact

Pieter Venter
info@urbanfarmingsa.co.za
03 Lovedale Avenue, Silverfields, Krugersdorp, 1739, South Africa