Legal

Data Subject Access Request (DSAR)

Your rights under the Protection of Personal Information Act (POPIA)

Under POPIA and, where applicable, the GDPR, you have rights over your personal information held by Agent Loop (Pty) Ltd. Use this form to exercise those rights. We will respond within 30 days of receiving your request.

Your Rights

Access: Receive a copy of all personal data we hold about you.
Correction: Have inaccurate or incomplete data corrected.
Deletion: Request erasure of your data (subject to legal retention obligations — FAIS requires 5 years).
Objection: Object to processing based on legitimate interest.
Portability: Receive your data in a structured, portable format.
Withdraw consent: Withdraw consent for AI processing or marketing at any time.
Complain: Lodge a complaint with the Information Regulator of South Africa.

Submit Your Request

Full name *

Email address *

Last 4 digits of your SA ID or passport number *

Used to verify your identity. We only need the last 4 digits.

Request type *

Additional details

I confirm that the information above is accurate and I am the data subject (or their authorised representative) making this request. I understand that Agent Loop may ask for additional verification before processing this request.

Alternatively, email privacy@agentloop.digital with the subject line "POPIA DSAR Request". We respond within 30 days as required by POPIA s25.

Our Verification Process

To protect your privacy, we will verify your identity before processing any DSAR. We may ask for a copy of your ID document (redacted to show only your name, photo and ID number). Requests from authorised representatives must include a signed mandate.

Timelines

We will acknowledge receipt within 3 business days.
We will respond substantively within 30 days of receipt (POPIA s25).
Complex requests may be extended by a further 30 days with prior notice.

Limitations

Certain data may be retained despite a deletion request where we have a legal obligation to do so — for example, FAIS requires 5-year retention of transaction records, and FICA requires 5-year retention of client identification records. We will inform you of any such limitations when responding to your request.