In terms of POPIA, the Responsible Party is the entity that determines the purpose and means of processing personal information. For all personal information processed in connection with GQ Beyond's operations, the Responsible Party is:
In terms of Section 55 of POPIA, GQ Beyond Holdings has appointed an Information Officer responsible for ensuring compliance with POPIA and handling data subject requests.
The Information Officer has been registered with the Information Regulator of South Africa as required under POPIA.
GQ Beyond processes the following categories of personal information in the ordinary course of its business operations:
GQ Beyond processes personal information only where at least one of the following lawful grounds exists, in accordance with POPIA's eight conditions for lawful processing:
POPIA grants you the following rights as a data subject. GQ Beyond is committed to facilitating the exercise of these rights:
Request confirmation of whether we hold your personal information and obtain a copy of that information.
Request correction of inaccurate, incomplete, or out-of-date personal information we hold about you.
Request deletion of your personal information where retention is no longer justified, subject to legal retention requirements.
Object to the processing of your personal information on reasonable grounds relating to your particular situation.
Request restriction of processing while a dispute about accuracy or lawfulness is being resolved.
Lodge a complaint with the Information Regulator of South Africa if you believe your POPIA rights have been infringed.
To exercise any of your rights under POPIA, please submit a written request to our Information Officer:
Your request should include:
GQ Beyond will respond to your request within 30 calendar days of receipt. We may extend this period by a further 30 days where the request is complex or where multiple requests have been received, and will notify you accordingly.
If you believe that GQ Beyond has infringed your rights under POPIA, you are entitled to lodge a complaint with the Information Regulator of South Africa:
We encourage data subjects to contact our Information Officer in the first instance to allow us an opportunity to resolve any concern directly before escalating to the Regulator.
In terms of Section 19 of POPIA, GQ Beyond has implemented appropriate technical and organisational security measures to protect personal information in its possession against loss, damage, unauthorised access, or unlawful processing. These include:
In the event of a personal information breach that is likely to prejudice a data subject, GQ Beyond will notify the Information Regulator and the affected data subject(s) as soon as reasonably possible, in accordance with Section 22 of POPIA.
In terms of Section 72 of POPIA, personal information may only be transferred to a third party in a foreign country if that country has adequate data protection laws, or if the data subject has consented, or if appropriate contractual safeguards are in place.
Where GQ Beyond uses international technology platforms (such as AI infrastructure providers) in the delivery of services, appropriate data processing agreements are in place to govern any personal information processed by those platforms, and data subjects are made aware of such transfers where applicable.
In accordance with the Promotion of Access to Information Act (PAIA) and POPIA, GQ Beyond has compiled the following statutory documentation:
These documents are reviewed and updated annually, or following any material change to GQ Beyond's processing activities or applicable legislation.
This POPIA Notice was last reviewed on 28 June 2026.