Legal

Privacy Notice

POPIA-aligned · Effective 16 May 2026

1. Who is the Responsible Party

The International Institute for Ethical Governance and Accountability (IIEGA) is the responsible party (data controller) for personal information collected through this website, as contemplated in the Protection of Personal Information Act, 4 of 2013 (“POPIA”).

2. Information we collect

  • Contact form: name, email, message.
  • Election Pledge: name, email, organisation, country, role, your handwritten signature and the generated signed PDF.
  • Account / staff sign-in: email, password (hashed by our authentication provider), display name.
  • Site analytics: page views, referrer, user agent, an anonymous visitor identifier, download events.

3. Why we collect it (lawful basis)

  • Consent – for the Election Pledge, contact form and marketing communications.
  • Legitimate interest – for site analytics, security, and operating the Command Centre for authorised staff.
  • Performance of activity – to respond to enquiries and deliver requested resources.
  • Compliance with law – where retention is required by South African law.

4. How we use it

  • To respond to your enquiry or training application.
  • To publish your name and organisation as a public signatory of the Election Pledge, unless you tell us otherwise in writing.
  • To send programme updates only where you have opted in.
  • To understand how the site is used and improve it.
  • To detect, prevent and address technical issues or abuse.

5. Sharing and processors

We do not sell your personal information. We use the following operators (processors) to run the site:

  • Hosting and database: Lovable Cloud, providing our website hosting, database and file storage on infrastructure that may be located outside South Africa.
  • Email delivery: standard transactional email providers used by IIEGA from time to time.

Where personal information is transferred outside South Africa, we ensure that the recipient is subject to laws, binding rules or contracts that uphold principles substantially similar to POPIA, as required by section 72 of POPIA.

6. How long we keep it

  • Pledge signatories: for as long as the Pledge campaign is active, plus a reasonable archival period.
  • Contact form messages: up to 24 months unless ongoing correspondence requires longer.
  • Analytics events: rolling 24 months, then aggregated.
  • Staff accounts: for as long as you have a role with IIEGA.

7. Security

We apply reasonable technical and organisational measures including encrypted transport (HTTPS), row-level access control on the database, role-based access in the Command Centre, and private storage buckets for signed pledge PDFs accessible only via short-lived signed URLs to authorised staff.

8. Your rights under POPIA

You have the right to:

  • request confirmation of, and access to, the personal information we hold about you;
  • request correction or deletion of inaccurate, irrelevant or out-of-date information;
  • object to the processing of your personal information;
  • withdraw consent at any time, where processing is based on consent;
  • lodge a complaint with the Information Regulator (South Africa) — inforegulator.org.za.

To exercise any of these rights, email info@iiega.com with “POPIA request” in the subject line. We will respond within a reasonable period and at most within the timeframe required by law.

9. Cookies and similar technology

We use essential cookies and an anonymous visitor identifier to operate the site and measure traffic. We do not use third-party advertising cookies. Your browser allows you to block or delete cookies — doing so may affect site functionality.

10. Children

The site is not directed to children under 18. We do not knowingly collect personal information from children.

11. Changes to this notice

We may update this notice from time to time. The “Effective” date above shows when it was last changed.

12. Contact

Privacy questions or POPIA requests: info@iiega.com. See also our Terms of Use.