1. How We Process Personal Data

We process data for three categories of users:

A. Virtual Assistants (Paid Members)

We process data to:

• Create and display your VA profile
  
• Manage billing and subscriptions
  
• Deliver platform features
  
• Share your listing with potential clients
  
• Provide customer support
  
  

Data processed may include:

• Contact information
  
• Business details
  
• Portfolio files
  
• Payment information (processed by secure third-party providers)
  
• Service preferences
  
  

B. Clients (Free Users)

We process data to:

• Share RFPs with relevant VAs
  
• Facilitate communication
  
• Improve directory search results
  
• Provide optional updates or newsletters
  
  

Data processed may include:

• Name
  
• Email
  
• Project details
  
• Any data voluntarily submitted
  
  

C. General Site Users

We process anonymous analytics data to improve:

• Traffic performance
  
• User experience
  
• Platform security
  
  

2. Legal Basis for Processing

Under POPIA, we process personal data on the following grounds:

• Consent (given when creating an account or submitting a form)
  
• Contractual necessity (for paid memberships)
  
• Legitimate interest (improving platform usability)
  
• Legal obligations (financial record-keeping, fraud prevention)
  
  

3. Data Storage & Security

We maintain strong security measures including:

• Encrypted databases
  
• Firewalls
  
• Access control and restricted permissions
  
• Secure third-party payment gateways
  
• Regular security audits
  
  

We do not:

• Sell your data
  
• Share personal info with unrelated third parties
  
• Store payment card details on our servers
  
  

4. International Transfers

Users from outside South Africa acknowledge:

• Their data may be stored or processed in South Africa
  
• South African law governs data protection
  
• They use the platform at their own discretion and risk
  
  

We take all reasonable steps to ensure protection regardless of region.

5. Data Retention Period

A. For Virtual Assistants (Paid Members)

We retain your data:

• For as long as your account is active
  
• For 5 years after cancellation for financial and legal compliance
  
• Unless you request deletion (where legally permitted)
  
  

B. For Clients (Free Users)

We retain RFP and contact form information:

• For 3 years, to maintain platform integrity and analytics
  
• You may request deletion at any time
  
  

C. Analytics & Technical Data

Retained between 12–36 months, depending on the tool.

D. Backups

Stored securely and rotated regularly.
Backup files may retain deleted data for up to 90 days before full removal.

6. Data Deletion Requests

You may request deletion of your data by contacting:

📧 admin@findmynextva.co.za

Deletion may be limited where:

• Financial law requires retention
  
• There are active legal matters
  
• Logs or backups still need to cycle through retention periods
  
  

7. Your Rights Under POPIA

You have the right to:

• Access your personal information
  
• Update or correct your information
  
• Request deletion
  
• Withdraw consent
  
• Object to certain processing
  
• Lodge a complaint with the Information Regulator of South Africa
  
  

8. Contact Information

For all privacy, POPIA, and data retention matters:
admin@findmynextva.com
South Africa