Privacy Policy
Last Updated: 15 September 2025
THE PROTECTION OF PERSONAL INFORMATION ACT (POPIA) CLIENT / USER PRIVACY PROTOCOLS POLICY
The purpose of this Privacy Policy is to inform clients, users, and all data subjects who engage with Commercial Mediation Africa (“CMA” or “the Company”) why personal information (“PI”) is collected and processed, the categories of PI involved, and how such information is used, stored, shared, and protected.
CMA is committed to full compliance with the Protection of Personal Information Act, 2013 (POPIA) and applies strict confidentiality and data protection protocols in the provision of mediation and alternative dispute resolution (ADR) services.
This policy applies to all natural and juristic persons whose PI is processed by CMA, including:
CMA, powered by SGA Law Africa, is a mediation and ADR services provider dedicated to resolving commercial disputes through voluntary, confidential, and cost-effective processes. Our services are guided by principles of neutrality, mutual consent, and respect for privacy.
For purposes of this policy, “personal information” includes, but is not limited to:
CMA obtains PI from:
The Company processes PI relating to:
CMA processes PI for the following purposes:
CMA processes PI under one or more lawful grounds:
PI may be disclosed lawfully to:
CMA applies appropriate, reasonable safeguards to protect PI, including:
In terms of POPIA, data subjects have the right to:
This Privacy Policy may be amended from time to time to reflect legal or operational changes. Updates will be published on CMA’s website with the effective date noted.
For any queries regarding these Terms or mediation services, please contact:
Our physical address:
Commercial Mediation Africa
Office 5 Second Floor, Building B
412 Kirkness Street
Arcadia, Pretoria
Our email address:
info@commercialmediationafrica.co.za
Our Contact Number:
(012) 110 4543
1. Preamble
The purpose of this Privacy Policy is to inform clients, users, and all data subjects who engage with Commercial Mediation Africa (“CMA” or “the Company”) why personal information (“PI”) is collected and processed, the categories of PI involved, and how such information is used, stored, shared, and protected.
CMA is committed to full compliance with the Protection of Personal Information Act, 2013 (POPIA) and applies strict confidentiality and data protection protocols in the provision of mediation and alternative dispute resolution (ADR) services.
2. Scope of Application
This policy applies to all natural and juristic persons whose PI is processed by CMA, including:
- Mediation parties and their representatives.
- Prospective clients and enquirers.
- Suppliers, partners, and service providers.
- Employees, consultants, and mediators.
- Visitors to the CMA website and digital platforms.
3. About CMA
CMA, powered by SGA Law Africa, is a mediation and ADR services provider dedicated to resolving commercial disputes through voluntary, confidential, and cost-effective processes. Our services are guided by principles of neutrality, mutual consent, and respect for privacy.
4. Definition of Personal Information (PI)
For purposes of this policy, “personal information” includes, but is not limited to:
- Identity information (names, ID/passport numbers, company registration details, positions held)
- Contact details (addresses, emails, phone numbers).
- Professional and business details (job titles, corporate affiliations, roles in a dispute).
- Sensitive dispute-related information (contracts, correspondence, claims, settlement proposals).
- Financial information (invoices, payment records, banking details).
- Electronic information (IP address, browsing data, communications exchanged through CMA’s website).
- Records created during mediation (meeting notes, summaries, settlement agreements).
5. Sources of PI
CMA obtains PI from:
- Direct submissions by clients, parties, or representatives.
- Documentation and records provided for mediation.
- Publicly available sources (CIPC, regulatory registers, court records).
- Third parties such as attorneys, accountants, or advisers.
- Website usage through cookies and analytics.
6. Categories of PI Processed
The Company processes PI relating to:
- Parties to disputes and their authorised representatives.
- Employees, directors, and shareholders of client organisations.
- Professional advisers involved in mediation (lawyers, auditors, experts).
- CMA employees, consultants, and mediators.
- Suppliers and business partners.
7. Purpose of Processing PI
CMA processes PI for the following purposes:
- Facilitating mediation and ADR proceedings.
- Communicating with parties, advisers, and stakeholders.
- Preparing, managing, and recording mediation sessions.
- Drafting and maintaining settlement agreements, where reached.
- Managing billing, invoicing, and administration of services.
- Ensuring compliance with legal and regulatory obligations.
- Protecting confidentiality, neutrality, and integrity of the mediation process.
- Training, accreditation, and quality assurance of mediators.
- Maintaining business relationships with clients and partners.
8. Lawful Basis for Processing
CMA processes PI under one or more lawful grounds:
- Consent of the data subject.
- Contractual necessity, to perform mediation services.
- Legal obligation, to comply with regulatory or statutory requirements.
- Legitimate interest, including maintaining confidentiality, professional standards, and business operations.
9. Confidentiality and Mediation Records
- All PI disclosed during mediation is confidential and will not be used for any purpose other than the mediation itself.
- Mediation records will not be shared with third parties, except where:
- required by law or court order;
- consented to in writing by all parties;
- disclosure is necessary to prevent imminent harm.
- Mediators and CMA staff are bound by strict confidentiality agreements.
10. Retention of PI
- PI will be retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law.
- Mediation records may be retained for administrative, professional, or legal purposes, subject to confidentiality obligations.
- After expiry of retention periods, PI will be securely deleted, destroyed, or anonymised.
11. Disclosure of PI
PI may be disclosed lawfully to:
- Parties and their authorised representatives in a mediation.
- Regulators, courts, or authorities where disclosure is legally required.
- Professional advisers engaged by CMA (attorneys, auditors, IT providers).
- Affiliates within SG Law Africa for administrative or compliance support.
12. Information Security
CMA applies appropriate, reasonable safeguards to protect PI, including:
- Secure IT systems, encryption, and restricted access.
- Confidential handling of mediation documents.
- Physical security at offices and mediation venues.
- Staff and mediator training on POPIA and confidentiality.
- Incident response and breach management procedures.
13. Data Subject Rights
In terms of POPIA, data subjects have the right to:
- Access PI held by CMA.
- Request correction or deletion of inaccurate or outdated PI.
- Object to processing of PI or withdraw consent (subject to legal and contractual limits).
- Request restriction of processing or transfer of PI.
- Lodge a complaint with the Information Regulator of South Africa.
- Website: https://www.justice.gov.za/inforeg
- Email: inforeg@justice.gov.za
14. Updates to This Policy
This Privacy Policy may be amended from time to time to reflect legal or operational changes. Updates will be published on CMA’s website with the effective date noted.
15. Contact Information
For any queries regarding these Terms or mediation services, please contact:
Our physical address:
Commercial Mediation Africa
Office 5 Second Floor, Building B
412 Kirkness Street
Arcadia, Pretoria
Our email address:
info@commercialmediationafrica.co.za
Our Contact Number:
(012) 110 4543