POPIA Statement

Our roles

For the account information of our clients, Bua is the responsible party. For personal information that website visitors share with a client's chatbot (conversations and leads), the client is the responsible party and Bua acts as an operator processing that information on the client's behalf.

Lawful processing

We process personal information lawfully, minimally, and for the purposes described in our Privacy Policy: providing the chatbot service, showing clients their conversations and leads, billing, and support.

Security safeguards

We maintain appropriate, reasonable technical and organisational measures: encryption in transit and at rest, access controls, and secured infrastructure. Where personal information is processed outside South Africa, we take reasonable steps to ensure protection consistent with section 72 of POPIA.

Data subject rights

You may:

• request confirmation of whether we hold personal information about you;
• request access to, or correction or deletion of, your personal information;
• object to processing, or withdraw consent where processing is based on consent; and
• lodge a complaint with the Information Regulator.

To exercise any of these rights, email [email protected]. We respond to verified requests within a reasonable time and without charge, as POPIA requires.

Information Regulator

The Information Regulator (South Africa) can be reached at [email protected] · inforegulator.org.za.

Information Officer

Bua's Information Officer can be contacted at [email protected].