Built POPIA-compliant. Not retrofitted.
Wakamoso was designed after South Africa's Protection of Personal Information Act (POPIA) was enacted. Consent, purpose limitation, and data-subject rights are built into the platform, not bolted on.
Consent
Consent is explicit and granular. Every respondent who joins the Wakamoso community research panel sees the consent clauses clause by clause — what is collected, why, for how long, who it is shared with, and how to exercise their rights. Consent can be withdrawn at any time.
Purpose limitation
Data is collected for specified research purposes. Each organisation commissioning research through Wakamoso signs a data-use agreement that specifies scope, purpose, retention, and attribution. Data is not used outside the scope of the agreement.
Data-subject rights
Every participant in the Wakamoso community panel retains the right to access, correct, or delete their records. Requests are handled in-platform, not by manual ticket. Deletion is enforced by the system.
Aggregation
Organisations accessing Wakamoso data do so at aggregate level — ward, operational site, or larger. Clients do not see identifiable individual records.
Security
Data is stored in line with POPIA requirements and industry best practice. Access to identifiable records is controlled, logged, and restricted to Wakamoso research staff with defined role-based access.
Third-party processors
Where Wakamoso uses third-party processors — for example WhatsApp Business infrastructure, hosting, or analytics — the processors are named in the data-use agreement, governed by our standard data processing terms, and subject to POPIA's cross-border transfer rules.
Complaints
Participants and clients with concerns about how Wakamoso handles personal information can contact us directly at info@wakamoso.africa. Participants retain the right to escalate to the South African Information Regulator if they believe their rights under POPIA have been breached.
Contact for data-subject requests
Email info@wakamoso.africa with "POPIA data request" in the subject line. We acknowledge within one working day and respond within POPIA's statutory window.