Legal
POPIA Compliance Statement
Last updated: February 2026
Our Commitment
SA Wages Pro is committed to processing personal information lawfully, in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA). Payroll data is among the most sensitive personal information an employer holds. We take this responsibility seriously.
Roles Under POPIA
You are the Responsible Party (Data Controller)
You collect and decide to process your employees' personal information. You are responsible for obtaining consent where required, informing employees of data processing, and ensuring the accuracy of the information you enter.
We are the Operator (Data Processor)
We process employee data only on your instructions (when you generate payslips, letters, and reports). We do not use employee data for any purpose other than delivering the Service to you.
The Eight POPIA Conditions
Accountability
SA Wages Pro has appointed an Information Officer responsible for POPIA compliance. Contact: privacy@wagespro.co.za
Processing Limitation
We only collect information that is adequate, relevant, and necessary for providing the Service. We do not process special categories of information without specific purpose.
Purpose Specification
Personal information is collected for payroll processing, compliance management, and HR documentation. We do not repurpose data beyond these stated uses.
Further Processing Limitation
We do not sell or share personal information with third parties for purposes incompatible with why it was originally collected.
Information Quality
You are responsible for the accuracy of data you enter. We provide tools to update and correct information at any time.
Openness
This statement, our Privacy Policy, and our Terms of Service explain our processing activities. Users are notified of significant changes by email.
Security Safeguards
We use AES-256 encryption at rest, TLS in transit, Row-Level Security at the database level, and multi-factor authentication for system access.
Data Subject Participation
Employees whose data you process can exercise their POPIA rights (access, correction, deletion) through you as the responsible party. We will assist you in fulfilling these requests.
Your Obligations as Employer
As the employer and data controller, you are responsible for:
- Informing your employees that their personal information is stored in SA Wages Pro
- Obtaining employee consent where required by law
- Ensuring you only enter accurate and up-to-date information
- Handling any employee access or deletion requests appropriately
- Not using the platform to process data for unlawful purposes
Data Breach Response
In the event of a data breach affecting your personal information, we will notify you and the Information Regulator within 72 hours of becoming aware, as required by POPIA. We maintain an incident response plan and conduct regular security reviews.
Information Officer
Our Information Officer is contactable at: privacy@wagespro.co.za
To lodge a complaint with the regulator: inforegulator.org.za
