Legal
POPIA Statement
Payroll means handling sensitive personal information. This statement explains how OrigamiPay supports your obligations under the Protection of Personal Information Act, 2013 (POPIA).
Last updated: 29 June 2026
1. Our roles under POPIA
When you use OrigamiPay to process your employees' information, you are the responsible party for that information and OrigamiPay acts as your operator, processing it on your instructions to provide the payroll service.
For your own account information, OrigamiPay is the responsible party.
2. Personal information we process for you
To run payroll, OrigamiPay processes the employee information you enter — which may include names, identity and tax numbers, contact and banking details, salary and deduction figures. This is processed only to deliver the features you use.
3. Purpose limitation
We process employee information solely to provide the payroll features you choose — calculating PAYE, UIF and SDL, generating payslips and preparing your EMP201 totals. We do not use it for any other purpose, and we do not sell it.
4. Security safeguards
We apply reasonable technical and organisational measures to protect personal information, including encryption in transit and access controls, consistent with the security-safeguards condition under POPIA.
5. Your responsibilities as the responsible party
As the employer, you remain responsible for the lawful processing of your employees' information — including having a lawful basis to process it, keeping it accurate, and informing your employees as required by POPIA. OrigamiPay gives you the tools to keep that information secure and tidy.
6. Data subject rights
Employees may have the right to access, correct or object to the processing of their personal information. Because the employer controls that data, employees should direct such requests to their employer, who can action them within OrigamiPay.
7. Retention
We retain personal information for as long as needed to provide the service and as instructed by you, subject to records that must be kept by law. You can request deletion of data you control.
8. Complaints
If you believe your information has been handled unlawfully, you may lodge a complaint with the Information Regulator (South Africa). We would welcome the chance to resolve any concern first — email help@origami-pay.co.za.
Questions about this policy? Email help@origami-pay.co.za.