POPIA Compliance Notice

ACT 4 OF 2013

1. Statutory Framework & Responsible Party

Tumisho Enock Group Companies (PTY) Ltd (Registration Number: 2021/847291/07, trading as "EM Group") operates as a designated Responsible Party under the Protection of Personal Information Act No. 4 of 2013 ("POPIA").

2. The 8 Conditions for Lawful Processing

EM Group adheres strictly to the eight statutory conditions for lawful data processing:

• Accountability: The designated Information Officer ensures full compliance with statutory data protection mandates.
• Processing Limitation: Data is collected directly from clients with explicit consent and for lawful industrial engineering purposes.
• Purpose Specification: Telemetry, personnel locations, and contact details are processed strictly for SLA execution and safety compliance.
• Further Processing Limitation: Personal data is never sold, traded, or shared with unauthorized commercial third parties.
• Information Quality: Reasonable steps are maintained to ensure data accuracy and completeness.
• Openness: Full transparency is maintained regarding information collection and storage practices.
• Security Safeguards: Robust cryptographic controls, encrypted data links, and multi-factor authentication protect all records.
• Data Subject Participation: Clients and personnel may exercise their rights to access, confirm, or request deletion of data.

3. Aerial Drone & Video Telematics Governance

In accordance with POPIA and SACAA guidelines, aerial photogrammetry and vehicle camera footage captured during commercial operations are treated with strict confidentiality. Identifiable bystanders or incidental private property captured during commercial flights are blurred or excluded from public reporting.