AO's South African affiliated entities are committed to processing personal information lawfully, reasonably and securely in accordance with the Protection of Personal Information Act (POPIA).
This page summarises our South African approach. Access to records held by these entities is dealt with separately under the Promotion of Access to Information Act (PAIA).
POPIA and PAIA
The framework that applies to a specific interaction depends on the AO entity involved, the service and the processing activity.
AO seeks to apply POPIA's conditions for lawful processing:
Where third parties process personal data on AO's behalf, AO seeks to use appropriate contractual, confidentiality and security arrangements.
AO seeks to apply organisational and technical safeguards appropriate to the information and the risk involved, including access control, authentication, secure communications where appropriate, monitoring, backup and recovery processes, supplier due diligence, confidentiality obligations and controlled retention and disposal.
Where personal information is transferred outside South Africa, the relevant AO entity seeks to apply an appropriate lawful transfer basis and supporting safeguards where required.
Depending on the circumstances and applicable law, a data subject may have the right to:
These rights are not absolute and may be restricted by applicable legal, contractual, regulatory or evidential requirements.
Email info@aogroup.co.za with:
AO may request reasonable proof of identity or authority before processing the request. Please do not attach identity documents until AO confirms a secure channel for them.
Only approved documents are published for download. Pending items are listed for transparency.
AO's statement of approach to the conditions for lawful processing.
Web page
Entity-specific PAIA manuals and the access-to-information process.
Web page
The prescribed form for objecting to processing.
Final approved document pending publication. For assistance, contact info@aogroup.co.za.
The prescribed form for requesting correction or deletion.
Final approved document pending publication. For assistance, contact info@aogroup.co.za.
Contact our privacy team if you wish to exercise a privacy right, raise a concern or need assistance identifying the relevant AO legal entity.
The public AO Group website at weareao.group is controlled by AO Group Holdings (Pty) Ltd, which is the responsible party or controller for website analytics, cookie and consent management, and general enquiries submitted through the website.
Optional analytics, advertising measurement and embedded third-party content are switched off until a visitor accepts them, and consent can be withdrawn at any time. Every cookie and storage item, with its purpose and duration, is listed in the Cookie Policy.
Where you go on to contract with, apply to, supply or otherwise interact directly with the AO entity operating in South Africa, that entity may become the responsible party or controller for that specific processing, as described on this page.
A discovery session is a working conversation about scope, constraints and what a credible first release looks like.
