Standards/๐ŸŒ Governance/POPIA

POPIA

Our compliance with South Africa's data-protection law.

Version 1.0 Updated July 8, 2026

Protecting your personal information in accordance with South African law.

WHOLE is committed to protecting your personal information and respecting your privacy.

As a South African health and technology platform, we process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

We recognise that health information is among the most sensitive types of personal information a person can share. Protecting that information is one of our highest responsibilities.

This page explains how WHOLE applies the principles of POPIA throughout our platform.

Our commitment

Privacy is built into WHOLE from the beginning.

We are committed to collecting, using, storing and protecting personal information responsibly, lawfully and transparently.

Whenever we process personal information, we aim to do so in a manner that respects your rights and supports your trust in our platform.

What information we collect

Depending on how you use WHOLE, we may collect information such as:

  • Your name
  • Email address
  • Account information
  • Lifestyle goals
  • Nutrition preferences
  • Health information you voluntarily provide
  • Activity and wellness data
  • Assessment responses
  • Consultation information
  • Messages shared with Eira
  • Device and technical information necessary to operate the platform

We collect only information that is reasonably necessary to provide our services and improve your experience.

Why we collect information

Your information helps us:

  • Create and manage your account
  • Personalise your WHOLE experience
  • Generate lifestyle recommendations
  • Improve Eira's educational guidance
  • Track your progress
  • Provide consultations
  • Improve platform performance
  • Maintain platform security
  • Meet legal and regulatory obligations where applicable

We will not use your information for purposes that are incompatible with these objectives without an appropriate legal basis.

Special personal information

Some information shared with WHOLE may relate to your health.

Under POPIA, health information is regarded as special personal information and requires additional protection.

WHOLE applies additional safeguards to protect this information and processes it only where permitted by law and necessary to provide our services.

Your rights

Under POPIA, you may have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Update outdated information
  • Request deletion of eligible information
  • Withdraw consent where applicable
  • Object to certain types of processing where permitted by law
  • Submit complaints regarding the handling of your personal information

WHOLE is committed to responding to legitimate privacy requests within a reasonable period.

Information security

Protecting your information requires both technology and responsible governance.

WHOLE implements reasonable technical and organisational safeguards designed to protect personal information against:

  • Unauthorised access
  • Loss
  • Misuse
  • Unlawful disclosure
  • Alteration
  • Destruction

While no digital system can guarantee absolute security, we continually improve our security practices to reduce risk and protect our members.

Sharing information

WHOLE does not sell your personal information.

Where information must be shared with trusted service providers to operate the platform, we take reasonable steps to ensure appropriate privacy and security protections are in place.

Information is shared only where necessary, lawful and consistent with our Privacy Policy.

International processing

Some trusted technology providers used by WHOLE may process information outside South Africa.

Where international processing occurs, WHOLE seeks to ensure that appropriate safeguards are implemented to protect your personal information in accordance with applicable privacy laws.

Artificial intelligence

Information you voluntarily provide may be used to personalise your experience with Eira and other AI-powered features.

Artificial intelligence is used to provide educational support and lifestyle guidance.

WHOLE does not use artificial intelligence to make solely automated decisions that produce legal effects or similarly significant consequences for users.

Meaningful healthcare decisions remain the responsibility of you and your qualified healthcare professionals.

Contacting us

If you have questions about how WHOLE processes your personal information, please contact us:

We are committed to addressing privacy concerns openly, respectfully and in accordance with applicable law.

Our promise

Privacy is more than legal compliance.

It is a commitment to treating every person's information with the same care, dignity and respect that we would expect for ourselves.

WHOLE will continue strengthening its privacy practices as technology, legislation and best practices evolve.

Because trust is built by protecting what matters most.

More in Governance