POPI Act Compliance
Last Updated: September 2, 2026
Introduction
Pranic Energy Healing Africa NPC (“PEH Africa”, “we”, “us” or “our”) is committed to processing personal information lawfully, fairly and responsibly in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).
This page explains how we apply POPIA to our website, newsletters, forms, resources, downloads, donations, payments, courses, events, applications and community activities. It should be read together with our Privacy Policy, Cookie Policy and Terms and Conditions.
Responsible Party
PEH Africa is the responsible party for personal information processed through the website and related services.
| Item | Details |
|---|---|
| Organisation | Pranic Energy Healing Africa NPC |
| Registration number | 2021/460271/08 |
| Information Officer | Valentina Cortini-Nutt |
| valentina@peh.africa | |
| Phone | +27 63 719 1697 |
| Address | 266 Oak Ave, Ferndale, Randburg, 2194, South Africa |
Our POPIA Commitments
We aim to comply with the POPIA conditions for lawful processing:
- Accountability: We take responsibility for personal information processed by or for PEH Africa.
- Processing limitation: We collect only information reasonably needed for lawful and specific purposes.
- Purpose specification: We collect information for clear purposes connected to our website, services, resources and organisation.
- Further processing limitation: We do not use information for unrelated purposes unless permitted by law or consented to.
- Information quality: We take reasonable steps to keep information accurate, complete and updated where necessary.
- Openness: We explain our processing through this page, our Privacy Policy, our Cookie Policy and notices on forms.
- Security safeguards: We use reasonable technical and organisational safeguards to protect personal information.
- Data subject participation: We provide ways for you to request access, correction, deletion, objection and other rights.
Purposes Of Processing
We process personal information for purposes including:
- Responding to enquiries, messages and support requests.
- Sending newsletters and PEH Africa updates after consent.
- Delivering free resources, guided meditations, publications and other downloads by email.
- Processing paid digital downloads, including Paystack payment verification and file delivery.
- Managing publication archive access, paid guided meditations, ebooks and other digital resources.
- Processing donations, donor communications and payment records.
- Managing course, event, workshop, meditation and programme registrations.
- Reviewing Local Coordinator applications and communicating with applicants.
- Administering volunteer, partnership and community participation requests.
- Sending transactional emails, receipts, download links and administrative notices.
- Maintaining security, verifying forms with Cloudflare Turnstile, preventing spam and preventing fraud.
- Running the website, improving content and understanding visitor activity.
- Meeting accounting, tax, non-profit, consumer, electronic communications and regulatory obligations.
- Protecting the rights, safety and legitimate interests of PEH Africa, visitors, users, donors, participants and the community.
Categories Of Personal Information
Depending on your interaction with us, we may process:
| Category | Examples |
|---|---|
| Identity information | First name, surname, full name |
| Contact information | Email address, phone number, country, city, province, postal code, physical address |
| Communication information | Messages, enquiries, feedback, support requests, email replies |
| Newsletter information | Subscription status, consent, mailing list category, unsubscribe records |
| Resource and download information | Resource selected, slug, category, request date, delivery status |
| Payment and donation information | Amount, currency, product, Paystack reference, payment status, receipt details, refund request details |
| Course and event information | Registration details, course/event selected, attendance details, payment or registration link used |
| Application information | Local Coordinator application answers, experience, location, skills, availability, preferred contact method |
| Technical information | IP address, browser, device type, pages visited, cookie preferences, security logs, Turnstile verification data |
| Voluntary sensitive information | Wellbeing, healing, meditation, spiritual, religious, philosophical or health-related information you choose to provide |
Special Personal Information And Children
POPIA gives additional protection to special personal information, including certain information about health, religious or philosophical beliefs and other sensitive categories. PEH Africa’s work may involve healing, meditation, wellbeing and spiritual education. We therefore ask you to avoid submitting sensitive details unless they are relevant to the specific request and you consent to us processing them for that purpose.
We do not intentionally collect personal information from children without appropriate parent, guardian or competent-person involvement where required. If children participate in any PEH Africa course, event, meditation, service or community programme, we process only the information reasonably needed for administration, safeguarding, communication and legal compliance.
Lawful Basis
We process personal information where a lawful basis applies, including:
- Consent.
- Contract or steps before entering into a contract.
- Compliance with a legal obligation.
- Legitimate interests of PEH Africa or a third party.
- Protection of your legitimate interests where relevant.
- Other grounds allowed by POPIA.
Operators And Third Parties
We may use operators and third-party providers to support the website and our services. These may include Netlify, Directus, Brevo, Paystack, PayPal, Cloudflare Turnstile, Cookie-Script, Meta Platforms, Cloudinary, file hosting services, accountants, professional advisers and lawful authorities.
Where a provider processes personal information on our behalf, we take reasonable steps to ensure appropriate confidentiality, security and purpose limitation. Where a third party acts independently, its own privacy terms apply.
Direct Marketing And Newsletters
We send newsletters and marketing communications only where you have subscribed, consented, or where otherwise allowed by law. Every marketing email should include a way to unsubscribe or opt out.
Transactional emails are different from marketing emails. We may still send you necessary transactional or administrative messages after an unsubscribe, such as payment confirmations, download links, refund correspondence, course administration or replies to your requests.
Retention And Deletion
We keep personal information only for as long as necessary for the purpose collected, unless a longer period is required or permitted by law.
Examples include:
- Payment, donation, refund and accounting records may be kept for statutory, audit and tax purposes.
- Newsletter records are kept until you unsubscribe or request removal, subject to minimal suppression or consent records where needed.
- Resource request and download delivery records are kept for delivery support, consent proof, fraud prevention and troubleshooting.
- Application and programme records are kept for organisational assessment and administration.
- Technical logs are kept for security and operational purposes.
When information is no longer needed, we delete, destroy, de-identify or anonymise it where reasonably possible.
Security Safeguards
We use reasonable safeguards to protect personal information, including:
- HTTPS encryption for website traffic.
- Access controls for administrative systems.
- Secure handling of service credentials.
- Cloudflare Turnstile to reduce automated abuse.
- Server-side Paystack verification before paid files are delivered.
- Limited access to personal information on a need-to-know basis.
- Administrative procedures for handling requests, incidents and complaints.
If we become aware of a security compromise involving personal information, we will investigate and notify affected data subjects and/or the Information Regulator where required by POPIA.
Your Rights Under POPIA
You may have the right to:
| Right | What it means |
|---|---|
| Access | Ask whether we hold personal information about you and request access to it |
| Correction | Ask us to correct inaccurate, irrelevant, excessive, outdated, incomplete or misleading information |
| Deletion or destruction | Ask us to delete or destroy information where legally appropriate |
| Objection | Object to processing in certain circumstances |
| Withdrawal of consent | Withdraw consent where processing is based on consent |
| Direct marketing opt-out | Object to or unsubscribe from direct marketing |
| Complaint | Lodge a complaint with the Information Regulator |
To exercise a right, contact our Information Officer. We may need to verify your identity before responding. Some rights may be limited where we must retain records for legal, accounting, tax, dispute, fraud prevention or legitimate operational reasons.
Information Regulator
If you believe your POPIA rights have not been respected, you may lodge a complaint with the Information Regulator of South Africa.
| Item | Details |
|---|---|
| Website | inforegulator.org.za |
| inforeg@justice.gov.za | |
| Phone | +27 10 023 5200 |
Updates To This Page
We may update this POPIA page when our processing activities, systems, services or legal obligations change. The updated version will be posted on this page with a new “Last Updated” date.