Every customer record in a CRM is personal information. POPIA does not stop you using one, but it expects you to be careful and honest.

Record only what you need

Keep the details you use to serve the customer, and avoid collecting sensitive information you have no reason to hold.

Control who sees it

Protect the system properly.

  • Give each person access only to what their job needs
  • Use strong passwords and two factor sign in
  • Remove access when someone leaves
  • Keep a record of who changed what

Keep, correct and delete

Decide how long you keep records and delete them when the reason ends. Be ready to show a customer their details, correct them or remove them on request.