Privacy Policy

The Movement for Social Justice (MSJ) respects your privacy and recognises the importance of protecting personal information.

This Privacy Policy explains how MSJ collects, uses, stores, shares, protects and otherwise processes personal information through the MSJ website, MSJ Connect, MSJ mobile application, registration systems, community services, communication channels and other MSJ digital services.

MSJ processes personal information with regard to the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.

1. Who We Are

For purposes of this Privacy Policy, “MSJ”, “we”, “us” and “our” refer to the Movement for Social Justice.

Depending on the circumstances, MSJ may act as the responsible party in relation to personal information processed through its platforms and activities.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through MSJ-controlled digital services, including the public website, MSJ Connect, mobile applications, membership and supporter registration systems, community features, case systems, communication tools, events, campaigns and authorised staff systems.

Separate notices may be provided where a specific programme or activity requires additional information.

3. Personal Information We May Collect

Depending on the service you use, MSJ may collect information such as your name, surname, cellphone number, email address, physical or residential information, province, municipality, ward, demographic information, registration details, membership or supporter information, communication preferences, verification records, account information, registration reference numbers, permanent MSJ registration numbers, device information, trusted-device information, security records, login information, IP address, browser information, app information, notification information, cases, community concerns, messages, documents, photographs and other information that you voluntarily submit.

MSJ only seeks to collect information reasonably required for the relevant purpose.

4. Political and Other Sensitive Personal Information

Participation in or association with a political organisation may reveal information concerning an individual's political persuasion or political involvement.

MSJ recognises that information concerning political persuasion may constitute special personal information under South African data-protection law.

Accordingly, MSJ applies heightened care to information relating to political participation, membership, support, registration, campaign participation and related organisational activities.

Such information will not be treated as ordinary commercial marketing data.

5. Why MSJ Processes Personal Information

MSJ may process personal information for legitimate organisational and operational purposes connected with its activities.

These purposes may include processing registrations, verifying contact details, administering members and supporters, issuing registration references and permanent registration numbers, operating MSJ Connect, authenticating users, preventing duplicate registrations, protecting accounts, operating trusted-device security, responding to community concerns, managing cases, communicating organisational information, administering events and campaigns, sending verification or security messages, maintaining records, preventing fraud and abuse, complying with legal requirements and improving MSJ services.

MSJ will not knowingly process personal information for an unrelated purpose that is incompatible with the purpose for which the information was collected unless legally permitted.

6. Registration Information

When you register with MSJ, information you provide may be used to establish, review and administer your registration.

MSJ may generate a screening or registration reference associated with your submission.

Once a registration is completed, MSJ may issue a permanent MSJ registration number.

Registration information may remain linked to your profile for legitimate organisational, security, administrative and recordkeeping purposes.

7. Email and Cellphone Verification

MSJ may verify an email address or cellphone number before allowing certain services to be used.

Verification information may include the time verification was requested, whether verification was completed, verification attempts and security information associated with the process.

Verification codes should not normally be retained in readable form after they are no longer required.

8. Device and Trusted-Device Information

For security purposes, MSJ may process technical information concerning the device used to access an account.

This may include a device or installation identifier, platform information, application version, security status and information indicating whether a device has been authorised as a trusted device.

Trusted-device information is used to reduce unauthorised account access and protect registered users.

MSJ does not intend such information to be used for unrelated surveillance of users.

9. Website and Application Information

When you use an MSJ website or application, technical information may be generated automatically.

This may include IP address, browser type, operating system, device type, application version, date and time of access, error information, security logs and interaction information.

Such information may be used for system operation, security, troubleshooting, performance monitoring and prevention of abuse.

10. Cookies and Similar Technologies

The MSJ website may use cookies or similar technologies necessary for login sessions, security, preferences, site functionality or analytics.

Where legally required, users may be provided with appropriate information or choices concerning non-essential cookies.

Disabling certain essential cookies may prevent parts of the website from functioning properly.

11. Cases and Community Submissions

Where you submit a community matter, complaint, case, report or request for assistance, MSJ may process the information necessary to understand and manage the matter.

This may include information concerning you and, in some circumstances, information concerning another person.

You should avoid submitting unnecessary confidential or sensitive information concerning another individual.

MSJ may restrict access to case information to authorised persons who reasonably require access.

12. Communications

MSJ may use your contact information to send communications connected with your registration or relationship with MSJ.

These communications may include verification messages, account-security notices, registration confirmation, organisational information, event information, campaign messages, public-participation opportunities, community updates and other legitimate MSJ communications.

Where required, appropriate opt-out mechanisms will be provided for communications that are not essential to the operation of your account or relationship with MSJ.

13. SMS and Email Providers

MSJ may use external service providers to deliver email, SMS, push notifications and other communications.

These providers may receive limited personal information necessary to deliver the communication, such as a cellphone number, email address, message content or delivery information.

MSJ seeks to use service providers subject to appropriate security and confidentiality requirements.

14. WhatsApp and Messaging Platforms

Where MSJ uses WhatsApp, Meta services or another messaging platform, the relevant platform provider may separately process information in accordance with its own terms and privacy policies.

MSJ will process information received through such channels in accordance with this Privacy Policy where MSJ is responsible for that processing.

Users should understand that communications transmitted through third-party messaging platforms also depend on the privacy and security practices of those providers.

15. Sharing of Personal Information

MSJ does not sell personal information to advertisers.

MSJ may disclose information where reasonably necessary to authorised MSJ personnel, technology service providers, hosting providers, email or SMS providers, professional advisers, contractors acting on behalf of MSJ, authorities where required by law, or other persons where disclosure is legally permitted and necessary for a legitimate purpose.

Access should be limited to what is reasonably necessary.

16. Operators and Service Providers

Where another organisation processes personal information on behalf of MSJ, MSJ may treat that organisation as an operator or service provider.

MSJ seeks to require operators to process information appropriately, maintain confidentiality and implement reasonable security measures.

17. International or Cross-Border Processing

Some technology, hosting, communication or cloud service providers may process information outside South Africa.

Where personal information is transferred across borders, MSJ will seek to do so in accordance with applicable legal requirements and appropriate safeguards.

18. Security Safeguards

MSJ takes reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, disclosure, destruction and misuse.

Measures may include access controls, encryption where appropriate, hashed identifiers, authentication, trusted-device controls, backups, logging, firewalls, secure configurations, restricted staff access and other security practices.

No security system can eliminate all risk.

19. Personal Information Breaches

Where MSJ becomes aware of a security compromise involving personal information, MSJ will assess the incident and take reasonable steps to contain and investigate it.

Where notification is legally required, MSJ will make appropriate notifications to affected persons and/or the Information Regulator in accordance with applicable law.

20. Retention of Personal Information

MSJ will not retain personal information indefinitely without reason.

Information may be retained for as long as reasonably necessary for registration, membership or supporter administration, organisational records, legal obligations, security, dispute resolution, fraud prevention, audit requirements and legitimate historical or operational purposes.

Different categories of information may have different retention periods.

When information is no longer reasonably required, MSJ may securely delete, destroy, de-identify or archive it as appropriate.

21. Accuracy of Personal Information

MSJ seeks to maintain information that is reasonably accurate and current.

Users are encouraged to notify MSJ when important contact or registration information changes.

MSJ may take reasonable steps to verify requested changes where necessary to prevent fraud.

22. Access to Personal Information

Subject to applicable law, you may request confirmation of whether MSJ holds personal information about you and may request access to qualifying personal information.

MSJ may require reasonable proof of identity before providing access.

Certain information may lawfully be withheld where an applicable legal exception applies.

23. Correction of Personal Information

You may request correction or updating of inaccurate, incomplete, misleading or outdated personal information.

MSJ may require evidence or additional verification before changing information linked to a protected account or registration.

24. Deletion and Objection Requests

Where applicable, you may request deletion or destruction of personal information that MSJ is no longer authorised or required to retain.

You may also object to certain processing where South African law gives you that right.

A deletion request does not necessarily require MSJ to delete information that must lawfully be retained for legal, regulatory, security, evidentiary, organisational or recordkeeping purposes.

25. Withdrawal of Consent

Where processing is based specifically on consent, you may withdraw that consent subject to applicable law.

Withdrawal does not invalidate lawful processing that occurred before the withdrawal.

Some services may no longer be available where the information is necessary to provide the service.

26. Direct Communications

MSJ may communicate with members, supporters and interested persons in accordance with applicable law.

Where required, users may object to or unsubscribe from certain electronic communications.

Security messages, account notifications, verification messages and other operational communications may continue where they are necessary to operate the service.

27. Automated Security Decisions

MSJ systems may automatically identify suspicious activity, duplicate information, failed login attempts or unusual device behaviour.

Such systems may result in temporary restrictions or requests for additional verification.

Where appropriate, users may contact MSJ for assistance if a security restriction appears to have been applied incorrectly.

28. Children and Minors

MSJ recognises that children's personal information requires additional protection.

Where MSJ processes the personal information of a child, appropriate legal authority, consent or another lawful basis must exist as required by applicable law.

MSJ will not knowingly use children's personal information for inappropriate purposes.

29. Links to Other Websites

MSJ websites and applications may link to third-party websites.

MSJ is not responsible for the privacy practices of websites or services that MSJ does not control.

Users should review the privacy policies of those external services.

30. Your Privacy Responsibilities

Users also have a responsibility to protect their own information.

You should keep your email account, cellphone, SIM card, device and authentication methods secure.

You should not share verification codes or authentication information with unauthorised persons.

If you believe your account or device has been compromised, you should contact MSJ as soon as reasonably possible.

31. Complaints

If you have a concern about MSJ's handling of personal information, you are encouraged to contact MSJ so that the concern can be investigated.

You may also have the right to submit a complaint to the Information Regulator of South Africa in accordance with applicable law.

32. Information Officer

MSJ will designate or maintain the appropriate information-governance responsibilities required by South African law.

Privacy-related requests may be directed to:

33. Changes to This Privacy Policy

MSJ may amend this Privacy Policy where necessary to reflect changes in law, technology, services, organisational practices or security requirements.

The updated policy will be published on the MSJ website or other appropriate MSJ platform.

The “Last Updated” date at the top of this page will indicate the most recent revision.

34. Contact Us

For privacy enquiries, access requests, corrections or other questions concerning personal information, contact: