Information & Compliance Officer

Under section 55 of the Protection of Personal Information Act, 2013 (POPIA), every responsible party must designate, register, and publish the details of an Information Officer who is accountable to the Information Regulator of South Africa for the responsible party's compliance with POPIA.

1. Designated Information Officer

Name

To be appointed prior to launch · placeholder for legal review

Role at Cannabuben (Pty) Ltd

Director

Information Regulator registration reference

To be added once the appointment is registered via the eServices Portal

Primary email

io@cannabuben.co.za

Postal address

To be confirmed prior to launch · South Africa

2. Deputy Information Officers

Where the Information Officer is unavailable, a deputy will receive and triage POPIA correspondence on their behalf.

Deputy email

privacy@cannabuben.co.za

3. What the Information Officer is responsible for

• Approving and registering Cannabuben's PAIA manual.
• Receiving and responding to data-subject access requests, correction requests, deletion requests, and objections to processing.
• Notifying the Information Regulator and affected data subjects of security compromises within the timeframes required by section 22 of POPIA (see breach notification).
• Ensuring appropriate technical and organisational safeguards are in place to protect personal information.
• Engaging with the Information Regulator in connection with investigations, complaints, and enforcement notices.
• Maintaining a current register of sub-processors and operator agreements (see sub-processors).

4. How to contact the Information Officer

For any POPIA-related question, complaint, data-subject access request, or operator-agreement enquiry, please email io@cannabuben.co.za with a short description of the matter, your contact details, and any relevant order or account reference.

We acknowledge receipt within five business days and respond substantively within the timeframes required by POPIA (typically 30 days for section 23 access requests).

5. Escalation to the Information Regulator

If you are not satisfied with the Information Officer's response, you may escalate to the Information Regulator of South Africa. The Regulator's details are published on its public portal at inforegulator.org.za. The Regulator can investigate, issue enforcement notices, and impose administrative fines of up to R10 million for serious breaches.

6. Club Compliance Officer

In addition to the POPIA Information Officer, the Cannabuben Club designates a Compliance Officer accountable for the Club's adherence to its Constitution and operating standards — including age and identity verification, confidential member record-keeping, product-safety standards, the prohibited-practices list, and the Club's intended alignment with the South African Cannabis Clubs Alliance (SACCA) Code of Compliance.

Role at Cannabuben (Pty) Ltd

Director, or a designated deputy

Compliance email

compliance@cannabuben.co.za

7. Plain-language summary

If you have a privacy concern, email io@cannabuben.co.za. If our response does not resolve the matter, you can complain to the Information Regulator.