Data & Compliance
Last updated: May 2026
At Wiki POS, we take data protection seriously and comply with global privacy standards. This page outlines how we handle your data, our compliance with GDPR, CCPA, PIPEDA, LGPD, POPIA, and ePrivacy regulations, and the security measures we have in place.
Full compliance with EU General Data Protection Regulation (GDPR). Lawful basis, consent management, and data subject rights fully implemented.
Compliant with California Consumer Privacy Act and Privacy Rights Act. Consumer rights to access, delete, and opt-out fully supported.
Full compliance with South Africa's Protection of Personal Information Act (POPIA), Act 4 of 2013.
Compliant with Brazil's LGPD and Canada's PIPEDA. International data transfer safeguards in place.
Global Compliance Standards
- GDPR (EU/EEA): Article 6 lawful basis, Article 7 explicit consent, and Article 21 data subject rights fully implemented.
- CCPA (California): Consumer rights to know, delete, opt-out, and correct all available. No sale of personal information.
- POPIA (South Africa): Lawful processing, fairness, and transparency at all times.
- LGPD (Brazil) & PIPEDA (Canada): International data transfers use Standard Contractual Clauses (SCCs) and appropriate safeguards.
- ePrivacy Directive: Cookie consent and electronic marketing compliance (opt-in for non-essential).
Data Security
- All data is encrypted in transit using TLS 1.2/1.3 (HTTPS).
- Data at rest is encrypted using AES-256 encryption.
- Access to production systems is restricted to authorised personnel only.
- We conduct regular security reviews and vulnerability assessments.
- Multi-factor authentication is available for all admin accounts.
Data Storage & Location
- Your data is stored on secure cloud infrastructure.
- Primary data is stored within servers that meet international security standards.
- We use reputable cloud providers with SOC 2 and ISO 27001 certifications.
- Backups are performed daily and retained for 30 days.
Data Access & Control
- You can export all your business data at any time from the Settings page.
- You can request a full copy of your personal data by emailing info@wikipos.co.za.
- Data deletion requests are processed within 30 days.
- Role-based access controls ensure staff only see what they need to.
Third-Party Processors
- We use carefully vetted third-party service providers who are bound by data processing agreements.
- Payment processing: PayFast (PCI DSS compliant).
- Email delivery: Transactional email providers with data processing agreements in place.
- Cloud infrastructure: Enterprise-grade providers with security certifications.
- We do not sell your data to any third party.
Breach Notification
- In the event of a data breach, we will notify affected users within 72 hours of becoming aware.
- We will report material breaches to the Information Regulator of South Africa as required by POPIA.
- We maintain an incident response plan to minimise impact and remediate issues promptly.
Contact Our Data Protection Team
For data protection enquiries, access requests, or to report a concern:
Email: privacy@wikipos.co.za
General Enquiries: info@wikipos.co.za
Regulatory Authorities:
- 🇪🇺 EU Data Protection Authority: Contact your national DPA
- 🇺🇸 California (CCPA): California Attorney General
- 🇿🇦 South Africa (POPIA): inforegulator.org.za
- 🇧🇷 Brazil (LGPD): ANPD (Autoridade Nacional de Proteção de Dados)
- 🇨🇦 Canada (PIPEDA): Office of the Privacy Commissioner of Canada
Response Time: We respond to all data requests within 30 days (or as required by your jurisdiction, whichever is shorter).