POPIA Compliance

The Protection of Personal Information Act (POPIA) is South Africa's data protection law that came into full effect on 1 July 2021. It regulates how personal information must be collected, processed, stored, and shared, giving individuals more control over their personal data.

The Act applies to all organizations operating in South Africa that process personal information, regardless of whether the processing is automated or manual.

Valentina Cortini Interior Design is fully committed to complying with POPIA. We have implemented comprehensive policies, procedures, and technical measures to ensure that:

• Accountability: We take responsibility for all personal information in our possession.
• Lawfulness: We process information lawfully and transparently.
• Purpose specification: We collect information for specified, lawful purposes.
• Further processing limitation: We don't use information for incompatible purposes.
• Information quality: We keep personal information accurate and up-to-date.
• Openness: We are transparent about our data practices.
• Security safeguards: We protect personal information against loss, damage, and unauthorized access.
• Data subject participation: We respect your rights to access and correct your information.

In accordance with POPIA, we have appointed an Information Officer who is responsible for overseeing our compliance with the Act and handling any data protection matters.

The Information Officer is supported by a dedicated team and can assist you with any queries related to your personal information, including access requests, corrections, or complaints.

We may collect the following categories of personal information:

We only collect information that is necessary for the purposes stated in this policy and with your consent where required.

We process your personal information for the following legitimate purposes:

Under POPIA, we process personal information based on the following lawful grounds:

POPIA grants you specific rights regarding your personal information:

We implement appropriate technical and organizational measures to safeguard your personal information:

In the unlikely event of a data breach, we have procedures in place to detect, investigate, and notify affected individuals and the Information Regulator as required by POPIA.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

When information is no longer required, we ensure it is securely destroyed or de-identified to prevent unauthorized access.

We may share your personal information with the following categories of third parties, only when necessary and with appropriate safeguards:

• Service providers: Cloudinary (image hosting), Google Analytics (website analytics), email service providers, payment processors.
• Professional partners: Suppliers, contractors, and tradespeople involved in your design project (with your knowledge).
• Legal/regulatory authorities: When required by law, court order, or to protect our legal rights.

All third parties are required to respect the security of your personal information and to treat it in accordance with the law and our instructions.

Some of our service providers are located outside South Africa (e.g., Cloudinary in the USA, Google in the USA). When we transfer personal information internationally, we ensure:

• The recipient country has adequate data protection laws; or
• We have contractual protections in place (such as standard contractual clauses approved by the Information Regulator); or
• You have provided consent for the transfer.

We will only send you marketing communications if you have given us your consent to do so. Each marketing communication will include:

• Clear identification of Valentina Cortini Interior Design as the sender.
• An easy and free mechanism to opt out (e.g., unsubscribe link).
• Our contact details.

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting our Information Officer directly.

If you believe we have violated your rights under POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa:

We encourage you to contact us first to resolve any concerns, and we will do our best to address them promptly.

We may update this POPIA compliance page from time to time to reflect changes in our practices or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• For significant changes, we may notify you through our website or directly.

We encourage you to review this page periodically to stay informed about how we protect your information.

For any questions, concerns, or requests related to your personal information or POPIA compliance, please contact our Information Officer:

We aim to respond to all requests within 30 days. If your request is complex or you have made multiple requests, we may take longer to respond, but we will notify you of any such delay.