As a data subject, you have rights in relation to personal information processed by Licentia. Licentia recognises and will give effect to these rights in accordance with POPIA, subject to lawful limitations, verification requirements, and any retention or regulatory obligations that may apply. POPIA expressly provides for data subject rights, including rights of access, correction, deletion or destruction in certain circumstances, objection, and rights relating to direct marketing.

Licentia may require reasonable proof of identity and authority before acting on a request, in order to prevent unauthorised disclosure, fraud, or unlawful alteration of records. Where a request cannot be granted in full, Licentia will deal with it in accordance with applicable law and the lawful basis on which the information is retained or processed. The prescribed POPIA forms published by the Information Regulator of South Africa, including Form 1: Objection to the Processing of Personal Information and Form 2: Request for Correction or Deletion of Personal Information or Destroying or Deletion of Record of Personal Information, are available on the Information Regulator’s official POPIA Forms page.

Also see Clause: 11.10 - POPIA Forms

11.1 Right to Be Informed

You have the right to be informed that your personal information is being collected and processed, the purpose for which it is being processed, the categories of information involved, and the parties or categories of parties to whom it may be disclosed, subject to lawful exceptions under POPIA. POPIA’s conditions for lawful processing require openness and notification to data subjects.

11.2 Right of Access

You have the right to request confirmation of whether Licentia holds personal information about you and, where lawful, to request access to that personal information and related record information.

This right is subject to lawful procedures, verification of identity, and any limitations or grounds for refusal that may apply under POPIA, PAIA, or other applicable law. POPIA provides data subjects with a right to request access to personal information held about them, and PAIA works alongside POPIA for access procedures.

11.3 Right to Correction, Updating, Deletion, Destruction, or Restriction

You have the right to request that Licentia:

Licentia will consider such requests in accordance with POPIA, applicable retention duties, and any overriding lawful basis for continued retention or processing. POPIA section 24 addresses correction, deletion, destruction, or the provision of credible evidence, and the Information Regulator provides Form 2 for such requests.

11.4 Right to Object to Processing

You have the right, on reasonable grounds relating to your particular situation, to object to the processing of your personal information where such processing is based on lawful grounds that permit objection under POPIA.

Where processing is required by law, is necessary to perform a contract, or is necessary for lawful enforcement, regulatory compliance, or another overriding lawful basis, Licentia may not be able to stop processing entirely, but will consider and respond to the objection lawfully.

The Information Regulator makes available Form 1: Objection to the Processing of Personal Information for this purpose.

11.5 Right to Object to Direct Marketing and to Withdraw Consent

Where Licentia processes your personal information for direct marketing by means of unsolicited electronic communications, you have the right to object, opt out, or withdraw consent at any time.

Licentia will honour a valid opt-out or withdrawal of consent for direct marketing, but this does not prevent Licentia from continuing to send communications that remain necessary for service delivery, legal compliance, or lawful enforcement. The Information Regulator also provides forms and guidance relevant to direct marketing under POPIA.

11.6 Right Not to Be Subject to Unlawful Automated Decisions

If Licentia uses system workflows, rules engines, or automated process controls, such use will remain subject to lawful processing principles and human governance oversight. Licentia does not use automated processing to override legal obligations or to make unlawful decisions about data subjects.

Where a data subject believes that automated processing has unfairly affected their rights, they may raise the matter with the Information Officer or Deputy Information Officer for review.

11.7 Right to Lodge a Complaint

You have the right to lodge a complaint with Licentia’s Information Officer or Deputy Information Officer. If you remain dissatisfied or believe your rights under POPIA have been infringed, you may lodge a complaint with the Information Regulator of South Africa.

The Information Regulator provides POPIA complaint forms and related procedures on its official website. Also see Clause: 11.10 - POPIA Forms

11.8 Exercise of Rights and Verification

Licentia may require sufficient information to verify the identity of the requester and, where applicable, the requester’s authority to act on behalf of another person or entity before giving effect to a request.

This is done to protect personal information against unauthorised access, disclosure, alteration, or deletion. Licentia may also request that the prescribed or substantially similar form be used where appropriate, and may require that requests be directed through the Information Officer structure set out in Section 2.

11.9 Lawful Limitations

The rights in this section are not absolute. Licentia may limit, refuse, defer, or qualify a request where:

Any such limitation will be dealt with lawfully and reasonably.

11.10 POPIA Forms

For convenience, data subjects may obtain the prescribed POPIA forms from the Information Regulator of South Africa on its official POPIA Forms page, including:

The Information Regulator’s official contact details published on that page include enquiries@inforegulator.org.za and 010 023 5200.