POPIA Compliance

Protection of Personal Information Act, 2013

Short version: RecoverSolar is a South African business, built for South African businesses, and compliant with POPIA. Your data lives on servers with recognised safeguards, we don't sell it, we honour unsubscribes immediately, and you can request deletion at any time.

Our Commitments Under POPIA

Lawful processing

We process personal information only where we have a legal basis: your consent (for outreach), contract performance (subscribers), or legitimate business interest (fraud prevention, security).

Purpose specification

Every piece of data we collect has a stated purpose in our Privacy Policy. We don't repurpose it.

Minimality

We collect only what we need to provide the Service. If a field isn't essential, it's optional.

Openness

Our full Privacy Policy is public and plain-language. No fine print, no dark patterns.

Security safeguards

Encryption in transit (HTTPS)
Encryption at rest (Supabase-managed)
Nightly encrypted backups
Access controls and audit logs
Real-time monitoring for anomalies

Data subject participation

You can access, correct, or delete your personal information at any time by emailing hello@recoversolar.co.za.

Information Officer

Timothy Rowe · hello@recoversolar.co.za

Direct Marketing

POPIA §69 requires opt-out consent for direct marketing to natural persons. Every marketing email we send:

Identifies the sender clearly
States the purpose of the email
Contains a one-click unsubscribe
Uses only publicly available business contact information for initial outreach

Unsubscribes are honoured immediately and permanently. Suppression lists are maintained indefinitely.

Regulator

If you believe your rights have been infringed, you can lodge a complaint with the Information Regulator:

inforegulator.org.za · enquiries@inforegulator.org.za

Contact

POPIA questions or data requests: hello@recoversolar.co.za