Leam HQ
POPIA Notice
Designed with POPIA principles in mind. Operational privacy workflows are in place — PDF-only data exports, data subject access / correction / deletion / objection handling, account and workspace deletion workflows, audit-logged actions, and strict separation between user workspaces and Leam HQ internal operations.
This document describes how Leam HQ, a product of Digital Culture Innovations (Pty) Ltd (Registration 2026/173422/07, Kimberley, South Africa), handles your data under the Protection of Personal Information Act, 2013. Questions: legal@leamhq.co.za.
This page explains, in plain language, how Digital Culture Innovations (Pty) Ltd applies the Protection of Personal Information Act, 2013 to Leam HQ.
Beta-readiness
Leam HQ is POPIA-ready for controlled beta use. We do not claim full POPIA compliance or external certification. We have implemented operational privacy workflows that exercise the rights POPIA grants you:
- PDF-only data exports — your data is delivered as a formal PDF response, not a raw database dump.
- Data access, correction, deletion and objection request workflows, handled within a stated 30-day SLA.
- Account deletion and workspace deletion workflows, with retention exceptions disclosed where required by tax or legal obligation.
- A legal case file archive for internal proof of handling, retained only where necessary for legal, audit, security, dispute-resolution or compliance purposes.
- Audit-logged privacy actions.
- Strict separation between user workspaces and Leam HQ internal legal / support operations.
- Workspace-scoped privacy controls and cross-border processing disclosures.
Our Information Officer
The Information Officer for Digital Culture Innovations (Pty) Ltd is the Chief Executive (Tiro Mathe) and is registered with the South African Information Regulator. Privacy enquiries: legal@leamhq.co.za.
The eight conditions, briefly
- Accountability — We take responsibility for the personal information you put into Leam HQ.
- Processing limitation — We process only what we need to run Leam HQ for you.
- Purpose specification — Each category of personal information is collected for a clear purpose, explained in our Privacy Policy.
- Further processing limitation — We do not reuse your data for unrelated purposes.
- Information quality — You can correct your personal information from the app at any time.
- Openness — This notice plus our Privacy Policy and Sub-processors list set out what we do.
- Security safeguards — Workspace isolation, audit logging, rate limiting, PayFast-verified payments, OAuth-secured integrations and continuous hardening.
- Data subject participation — You can access, correct, or delete the data we hold about you.
How to exercise your rights
From inside the app, open Settings → Privacy & Data to:
- Download a copy of your workspace data.
- Request correction of personal information.
- Request deletion of your account or workspace (30-day grace window).
- Object to or restrict specific processing activities.
If you prefer email, write to legal@leamhq.co.za from the address attached to your account. We respond within 30 days.
Complaints
You have the right to lodge a complaint with the South African Information Regulator at inforegulator.org.za. We would appreciate the chance to address your concern first by writing to the address above.
Cross-border processing
Because Leam HQ uses infrastructure providers outside South Africa, some personal information may be processed cross-border. Our Supabase project is hosted in the EU / Ireland region, and our Render application hosting is located in Frankfurt, Germany. We disclose this clearly and take reasonable steps to ensure that personal information remains protected through appropriate security, contractual and operational safeguards. The full list of providers and their regions is published at /subprocessors.
Information Regulator
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
General: inforeg@justice.gov.za
Complaints: complaints.IR@justice.gov.za