Last updated: 7 July 2026

SOJO Business & Tourism (“SOJO”, “we”, “us”, “our”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). This Privacy Policy explains how we collect, use, store, and protect personal information when you visit sojo.co.za or interact with our organisation, and it sets out your rights as a data subject.

1. Who we are

SOJO Business & Tourism is a not-for-profit organisation operating in the south of Johannesburg, with contact details at Gold Reef City Casino, Northern Parkway, Ormonde, Johannesburg, reachable at info@sojo.co.za or (+27) 71 336 7531.

2. Information Officer

In terms of POPIA, our Information Officer is responsible for ensuring compliance with this policy and the Act. [Insert Information Officer’s name and contact details, e.g. name, email, phone.] Any queries, complaints, or requests relating to your personal information should be directed to the Information Officer.

3. Personal information we collect

We collect personal information that you voluntarily provide to us, including when you complete our contact or “Join the SOJO Community” form (full name, email address, and optionally your phone number and message content), register as a business member, volunteer, or participant in our events or Helping Hands Foundation programmes, or otherwise correspond with us by phone or email. We may also automatically collect limited technical information through cookies and similar technologies when you browse our website, such as IP address, browser type, device information, and pages visited, for analytics and site functionality purposes.

4. Purpose of processing

We process your personal information to respond to your enquiries and requests submitted through our website, to facilitate business membership, event registration, volunteering, and participation in community initiatives, to communicate with you about SOJO activities, events, and services you have engaged with, to improve our website and understand how visitors use it, and to comply with any legal or regulatory obligations. We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.

5. Lawful basis for processing

We rely on your consent (given when you submit a form or subscribe to communications), the necessity of processing to take steps at your request before entering into an arrangement with you (such as business membership), and our legitimate interests in operating and improving our organisation and website, balanced against your rights to privacy.

6. Sharing of information

We do not sell or rent your personal information. We may share information with service providers who support our operations, such as website hosting, email, or IT service providers, who are contractually bound to protect your information, relevant City of Johannesburg or partner stakeholders where necessary to facilitate business and tourism initiatives you have opted into, and any party where required by law, regulation, or a valid legal process. Any third party we share information with is required to apply safeguards consistent with POPIA.

7. Cross-border transfers

Where any personal information is transferred outside of South Africa (for example, where a service provider’s servers are located abroad), we will ensure appropriate safeguards are in place in accordance with section 72 of POPIA.

8. Cookies

Our website may use cookies and similar tracking technologies to enable core functionality and to gather anonymised analytics about site usage. You can control or disable cookies through your browser settings; however, this may affect the functionality of the website.

9. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law, after which it is securely deleted or anonymised.

10. Security measures

We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, interference, modification, or disclosure, in line with section 19 of POPIA.

11. Your rights as a data subject

Under POPIA, you have the right to be notified that your personal information is being collected, to access the personal information we hold about you, to request correction, deletion, or destruction of your personal information, to object to the processing of your personal information, to withdraw consent at any time where processing is based on consent, and to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed. To exercise any of these rights, please contact our Information Officer using the details above.

12. The Information Regulator

If you are not satisfied with our response to any privacy concern, you may contact the Information Regulator of South Africa at enquiries@inforegulator.org.za or via their website, JD House, 27 Stiemens Street, Braamfontein, Johannesburg.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “last updated” date.

14. Contact us

For any questions about this Privacy Policy or how we handle your personal information, please contact us at info@sojo.co.za or (+27) 71 336 7531.