Data protection policy
Our commitments for handling personal information in learning, enquiries and business relationships.
The Greymatter Collective (Pty) Ltd is committed to handling personal information responsibly in accordance with applicable requirements of the Protection of Personal Information Act (POPIA). The Information Officer oversees information requests, concerns and the development of appropriate information-management practices.
Explain why information is needed, identify an appropriate lawful basis and collect only what is relevant to the purpose. Ask participants to leave unnecessary sensitive details out of learning reflections and enquiries.
Limit access to people who need information for their role. Apply proportionate organisational and technical safeguards, and review relevant service-provider arrangements.
Provide a route to request correction. Keep records for their purpose and applicable obligations, then arrange appropriate deletion, anonymisation or disposal.
Review the purpose, recipients and applicable safeguards before sharing information or arranging cross-border processing. Escalate a suspected security compromise to the Information Officer for assessment and any required response or notifications.
Information Officer: Earle Hilton Drury
Email: earle@greymattercollective.org
Telephone: 082 554 7704
Information Regulator registration number 2026-068311, registered 2 October 2026. The registration certificate records the Information Officer’s registration; it does not certify organisation-wide POPIA compliance.
Contact the Information Officer to ask about personal information held about you, request access or correction, or raise a deletion request or objection where applicable. Explain the matter and provide a reply address. Any identity or authority check should be proportionate; do not attach an identity document to an initial general enquiry.
The access-to-information page links the Information Regulator’s current PAIA forms and guide. You can also contact the Information Regulator about a privacy concern.
Read the website privacy notice for actual website technology and correspondence arrangements, and Saved work & your device for the learning tools. Where a programme or project separately collects learner or client records, its information arrangements should be explained before those records are provided.