POPIA Privacy Notice

1. Responsible Party

My Whipple Journey is operated as a sole proprietorship under the business/trading name MR JP Kilian Pancreatic Aid Fund.

2. What Personal Information We May Collect

Depending on how you use the website, we may collect personal information that you voluntarily provide to us, including:

• name and surname;
• email address;
• country or location information that you choose to provide;
• information supplied when requesting free resources;
• purchase and transaction information;
• information contained in messages or enquiries sent to us;
• information voluntarily supplied with community submissions; and
• technical information associated with use of the website where applicable.

3. Free Resources & Download Forms

When you request a free resource, the website may ask for information such as your name, surname, country, email address and information about why you are accessing the resource.

Where a form asks for a diagnosis date or other health-related information, that information should only be provided voluntarily and where the form clearly indicates why it is being requested.

Information collected through these forms may be used to deliver the requested resource, administer the resource service, communicate with you where lawfully permitted, and improve the website and resources.

4. Why We Process Personal Information

Personal information may be used to:

• provide requested books, downloads and resources;
• process and support purchases;
• respond to customer and website enquiries;
• manage transaction or delivery problems;
• administer community submissions where permission has been given;
• maintain, secure and improve the website;
• communicate with you where there is a lawful basis to do so; and
• meet applicable legal or regulatory obligations.

Personal information will not be used for a purpose incompatible with the purpose for which it was collected unless permitted by applicable law.

5. Lawful Processing

Personal information will be processed on a lawful basis permitted by POPIA. Depending on the circumstances, this may include consent, taking steps at your request, performing a transaction, complying with a legal obligation, or another lawful basis recognised by POPIA.

Where processing is based on consent, you may withdraw that consent, subject to any legal or contractual limitations that may apply.

6. Health & Special Personal Information

You should therefore avoid submitting detailed medical information through ordinary website forms unless the form specifically requests it and explains the purpose for which it is required.

Where health-related information is voluntarily provided, it will be handled only for a lawful and stated purpose and with appropriate safeguards.

My Whipple Journey does not use personal health information submitted through this website to provide individual medical diagnosis or treatment.

7. Payment Information

Payments made through the website are processed securely by Paystack.

My Whipple Journey does not request or store customers' full card numbers, CVV numbers, PINs or banking passwords by email.

Payment and transaction information may be received or processed to confirm purchases, provide digital products, investigate transaction problems and administer refunds or support requests.

8. Community Stories & Submissions

If you voluntarily submit a story, photograph, video or other material for possible publication, we may use the information provided to review, edit and publish the submission where permission has been given.

Please do not send private medical or personal information belonging to another person unless you have that person's permission or another lawful basis to share it.

Publication of a community story does not mean that My Whipple Journey endorses every medical opinion, treatment decision or claim expressed by the contributor.

9. Sharing Personal Information

We do not sell personal information.

Personal information may be shared with service providers where reasonably necessary to operate the website or provide a service you have requested. This may include payment processing, website hosting, email delivery, technical support, security and other contracted services.

Where another party processes personal information on our behalf, appropriate safeguards and contractual measures should be applied as required by applicable law.

10. Cross-Border Processing

Some technology, hosting, payment, email or other service providers may process or store personal information outside South Africa.

Where personal information is transferred across borders, such transfers will be handled in accordance with the applicable requirements of POPIA.

11. Information Security

We take reasonable technical and organisational measures intended to protect personal information against loss, damage, unauthorised access, unlawful processing or unauthorised disclosure.

No internet transmission or electronic storage system can be guaranteed to be completely secure. You should therefore avoid submitting information that is not necessary for the purpose of a particular form.

12. Retention of Personal Information

Personal information will not be retained for longer than is necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

When information is no longer required, appropriate steps will be taken to securely delete, destroy or de-identify it where applicable.

13. Your Rights Under POPIA

Subject to the applicable provisions of POPIA, you may have rights to:

• request access to personal information held about you;
• request correction or updating of inaccurate information;
• request deletion where the law permits;
• object to certain processing;
• withdraw consent where processing is based on consent; and
• object to direct marketing in accordance with applicable law.

Requests should be made in writing using the privacy contact details below. We may need to verify your identity before responding.

14. Direct Marketing

We may communicate with you about My Whipple Journey, books, resources, website updates or related information where permitted by POPIA.

Electronic direct marketing will be conducted in accordance with the applicable requirements of POPIA, including consent requirements where they apply.

Marketing communications will provide an appropriate means for you to request that further marketing communications cease.

You may contact us at info@mywhipplejourney.com regarding your marketing preferences.

15. Cookies & Website Technology

The website may use cookies or similar technologies for functionality, security, analytics or other stated purposes.

The actual cookies and third-party technologies used on the live website should be reviewed periodically so that this notice remains accurate.

16. Children

The website is not intended to knowingly collect children's personal information for purposes that are not permitted by law.

If you believe that a child's personal information has been submitted to us improperly, please contact us so that the matter can be reviewed.

17. Security Compromises

If a security compromise occurs involving personal information, we will take the steps required by applicable law, including addressing the incident and making notifications where POPIA requires them.

18. Information Officer & Privacy Contact

For questions about this Privacy Notice, personal information held by us, access or correction requests, privacy concerns or requests to stop direct marketing, please contact:

19. Complaints to the Information Regulator

If you believe your personal information has been unlawfully processed and the matter cannot be resolved directly with us, you may lodge a complaint with the Information Regulator of South Africa through its official complaint channels.

The Information Regulator provides POPIA complaint forms and an eServices portal for relevant privacy matters.

20. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to the website, products, payment arrangements, community services, service providers or applicable legal requirements.

The latest version will be published on this page together with the date it was last updated.