CASA Events App

1. INTRODUCTION

The Chiropractic Association of South Africa (CASA, “we”, “us”, or “the Association”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) and all applicable South African data protection laws.

This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal information when you use the CASA Events App (“the App”) and related services.

By creating an account or using the App, you confirm that you have read and understood this Privacy Policy.

Where required by law, your personal information is processed based on your explicit consent or another lawful basis as outlined below.

2. RESPONSIBLE PARTY

CASA is the Responsible Party for purposes of POPIA. CASA has formally appointed its Information Officer in accordance with POPIA.

Information Officer:

Dr Bridget Bromfield

Tel: 079 815 4009

Email: info@chiropractic.co.za

Physical Address: Suite 104, Granger Bay Boulevard, Cape Town, Western Cape, 8001

3. WHAT PERSONAL INFORMATION WE COLLECT

We apply the principle of data minimisation and collect only information necessary for legitimate operational purposes.

3.1 Information You Provide

This may include:

• First and last name
• Email address
• Phone number
• Council registration number (for CPD certification)
• Membership number
• Profile photograph (optional, requires camera access permission)
• South African ID number

3.2 Automatically Collected Information

When you use the App, we may automatically collect:

• Device manufacturer and operating system
• App version
• Browser type and version
• IP address
• Date and time of access
• Usage analytics and diagnostic data

Financial information related to payment, including name, email address, billing address, credit card information, phone number, and other information necessary to complete a transaction or purchase, record of products or services purchased, and the date the transaction(s) occurred - these are collected via a secure payment gateway (DPO PayGate) and none of your payment information is stored on the CASA systems.

The App does not collect personal information while operating in the background.

4. PURPOSE AND LAWFUL BASIS FOR PROCESSING

We process your personal information for the following purposes and lawful bases:

• Membership management – Performance of a contract
• CPD certificate issuance – Legal obligation
• Event registration – Legal obligation
• App functionality – Legitimate interest
• Security monitoring – Legitimate interest
• Marketing communications (if applicable) – Consent

Where consent is required, it is obtained through explicit opt-in mechanisms within the App. You may withdraw consent at any time.

5. SHARING OF PERSONAL INFORMATION

We do not sell, rent, or trade your personal information.

5.1 Service Providers

We may share information with:

• Mr Nabegh Muhra (App support provider)
• ProfNet (Membership administration)
• Cloud hosting providers

All service providers are contractually bound to maintain confidentiality and POPIA-compliant safeguards.

5.2 Legal and Regulatory Authorities

We may disclose personal information if required by law or to:

• Comply with a legal obligation
• Protect CASA’s rights
• Prevent fraud or unlawful activity
• Respond to lawful requests

6. CROSS-BORDER TRANSFERS

Personal information is primarily stored within South Africa in secure Microsoft Azure cloud environments.

Where limited cross-border processing occurs (for example through global cloud infrastructure routing), we ensure that:

• The recipient is subject to laws substantially similar to POPIA; or
• A binding agreement ensures appropriate safeguards; or
• The transfer is otherwise permitted under Section 72 of POPIA.

Please note that all data in transit is encrypted using HTTPS/TLS protocols to protect your privacy.

7. DATA RETENTION

We retain personal information only for as long as necessary for:

• Membership and CPD record requirements
• AHPCSA Audit obligations (minimum 5 years where required by law)
• Dispute resolution
• Regulatory compliance

When no longer required, personal information is securely deleted or anonymised.

8. SECURITY MEASURES

CASA implements appropriate technical and organisational safeguards including:

• SSL/TLS encryption
• Role-based access control
• Secure cloud infrastructure
• Confidentiality agreements with service providers
• Access restriction by authorised IP where applicable

In the event of a data breach:

• We will take immediate steps to contain and investigate the incident
• Notify the Information Regulator where required
• Notify affected data subjects as soon as reasonably possible

9. YOUR DATA SUBJECT RIGHTS

Under POPIA, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion (subject to legal limitations)
• Restrict processing
• Object to processing
• Withdraw consent
• Lodge a complaint with the Information Regulator

Requests must be submitted in writing to the Information Officer. Identity verification may be required. CASA will respond within a reasonable timeframe, generally within 14 days.

10. ACCOUNT DELETION

You may request deletion of your user profile via the Support section in the App or by contacting the Information Officer. Deletion will be completed as soon as reasonably possible, subject to retention obligations.

11. COOKIES AND TRACKING

The App may use analytics tools to improve functionality and user experience.

You may disable tracking via your device settings:

To turn off tracking on iOS, go to Settings > Privacy > Tracking.

To turn off tracking on Android, go to Settings > Privacy > Ads / Tracking.

12. CHILDREN

The App is not intended for persons under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us and we will take steps to remove that information from our systems.

13. CHANGES TO THIS POLICY

CASA may update this Privacy Policy from time to time. Updates will be made available within the App and will be effective from the date stated at the top of this document. Continued use of the App after updates constitutes acceptance of the revised policy.

14. DISPUTE RESOLUTION

If you are dissatisfied with how we handle your personal information, you may contact the Information Regulator (South Africa) at “complaints.IR@justice.gov.za”.

We encourage you to contact CASA first to resolve any concerns at admin@casacouncil.co.za before approaching the Information Regulator.

15. DECLARATION

By using the CASA Events App, you confirm that:

• You have read this Privacy Policy;
• You understand how your information is processed;
• You consent where required to such processing;
• You understand your rights under POPIA.