POPIA Policy
1. Purpose
This policy explains how the ARC Client Portal complies with the Protection of Personal Information Act, 4 of 2013 ("POPIA"), and how you can exercise your rights as a data subject.
2. Responsible party and operator
The responsible party is RSC Consulting Services (Pty) Ltd, trading as RSC Dynamic Supply Chain Management, part of the LiebenGroup. NBS Group hosts and maintains the portal on RSC's behalf as an operator, and processes personal information only on RSC's instructions.
3. What is processed, and why
The portal processes the names, email addresses, hashed passwords and access assignments of client users, together with sign-in and usage records. This is done to provide clients with secure access to their own documents, to keep the service safe, and to meet legal obligations. No special personal information is collected, and personal information is not used for marketing.
4. How POPIA's conditions are applied
- Accountability — RSC owns this policy and reviews it.
- Processing limitation — only the minimum information needed to run the portal is collected.
- Purpose specification — information is used for portal access, security and support, and nothing else.
- Further processing limitation — information is not reused for unrelated purposes.
- Information quality — account details can be corrected on request or by an RSC administrator.
- Openness — this policy and the Privacy Policy are published on every portal page.
- Security safeguards — encrypted connections, hashed passwords, role- and site-based access control, logging of administrative actions, and regular backups on servers managed for RSC by NBS Group.
- Data subject participation — the rights below.
5. Your rights
You may ask RSC:
- whether we hold personal information about you, and for a copy of it;
- to correct or update it;
- to delete it, where we are not required by law to keep it;
- to object to processing.
Requests can be made through your usual RSC contact or the head office below. We will respond within a reasonable time and may need to verify your identity first.
6. Complaints
If you believe your personal information has been mishandled and RSC has not resolved your complaint, you may complain to the Information Regulator (South Africa) — inforegulator.org.za.
7. Contact
POPIA requests and questions: your usual RSC contact, or the LiebenGroup head office — 28 Sandringham Road, Winelands Business Park, Kraaifontein, Cape Town, 7570 · Tel 021 987 0190.