POPIA Compliance Statement

Last Updated: 2026/03/17

At Legacy Songbird, we respect your privacy and are committed to protecting your personal information. This statement explains how we handle your personal information in compliance with the Protection of Personal Information Act, 2013 (Act 4 of 2013) ("POPIA").

Who We Are

Legacy Songbird is the "Responsible Party" for the purposes of POPIA. This means we determine how and why your personal information is processed.

Our Information Officer:
Name: Zirk Eloff
Title: Owner/Director
Email: zirk.eloff@legacysongbird.co.za
Phone: 071 884 0943

What Personal Information We Collect

We may collect the following personal information depending on your interaction with us: name and surname; email address; phone number; information submitted via our website contact forms; payment details (processed securely through PayFast — Legacy Songbird does not store your credit card or banking details; this information is handled directly by PayFast); and, where necessary for your specific song project and with your explicit consent, special personal information.

How We Use Your Information

We use your personal information to communicate with you about your custom song project, process payments securely, respond to your inquiries, and, if applicable, deliver the final song and related services.

Your POPIA Rights

1. Right to Be Informed: You have the right to be told why we are collecting your information and how it will be used. This statement serves that purpose.

2. Right to Object to Processing: You may object to the processing of your personal information at any time via email, SMS, WhatsApp, or phone call. This service is free of charge.

3. Right to Request Correction or Deletion: If your personal information is inaccurate, irrelevant, excessive, or out of date, you may request that we correct or delete it via email, SMS, WhatsApp, or phone call (free of charge). We will notify you within 30 days of the action taken.

4. Right to Withdraw Consent for Direct Marketing: Legacy Songbird does not currently engage in electronic direct marketing. Should we wish to send marketing communications in the future, we will first obtain your explicit written consent. You will always have the right to withdraw that consent.

5. Right to Lodge a Complaint: If you believe your personal information has been interfered with, you have the right to lodge a complaint with the Information Regulator.
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
Phone: 010 023 5200

6. Right to Civil Proceedings: You have the right to institute civil proceedings regarding any alleged interference with the protection of your personal information.

Sharing Your Information (Third-Party Services)

We use trusted third-party service providers ("Operators") to deliver our services, including Mailchimp (for email communication and newsletters when consent is obtained), SocialBee (for social media management), and PayFast (for secure payment processing). We take reasonable steps to ensure these operators treat your personal information with the same level of care and security that we do.

Security Compromises (Data Breaches)

We have implemented security measures to protect your personal information from unauthorized access. In the unlikely event of a security compromise where your information has been accessed or acquired by an unauthorized person, we will notify you and the Information Regulator as required by Section 22 of POPIA.

How to Exercise Your Rights

To exercise any of the rights above, please contact our Information Officer, Zirk Eloff, using the details provided above. You may use the official forms issued by the Information Regulator or simply provide your request in writing. We will respond as soon as possible and within the timeframes prescribed by law.

Changes to This Statement

We may update this compliance statement from time to time. The latest version will always be available on our website. In the case of significant changes, we may notify you directly.