POPIA Compliance
Privacy Policy
Who we are
ABIDE — Spiritual Direction with Vanessa Vermaak (“ABIDE”, “we”, “us”, “our”) provides spiritual direction, retreats, workshops and related services.
- Responsible Party: ABIDE — Spiritual Direction with Vanessa Vermaak
- Information Officer (POPIA): Vanessa Vermaak
- Website address: https://abidejourney.co.za/wp.
- Email: vanessa.vermaak@abidejourney.co.za
- Postal/Physical address: P.O.Box 1375 Randpark Ridge 2195
We are committed to protecting personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). POPIA applies to all South African organisations that collect and process personal information.
What personal information we collect
We collect only what we need to provide our services and communicate with you:
- Contact details: name, email address, phone/WhatsApp number.
- Booking & event data: session/retreat/workshop registrations, attendance, preferences (e.g., in‑person/online).
- Testimonials & survey responses: statements you share, and your preference for how (or if) your name may be shown.
- Communications: messages sent via forms, email, or WhatsApp.
- Payment records (if applicable): amounts paid, date, and method (payments are typically processed by third‑party operators; we do not store card numbers).
- Website data: basic analytics/cookies; see Cookies & Analytics below.
POPIA treats personal information broadly (e.g., names, contact details, and even opinions about a person) and requires transparency about use.
Why we collect it
We process your personal information to:
- Schedule and deliver spiritual direction sessions (in‑person or online), and retreats/workshops.
- Communicate about bookings, reminders, resources, and changes.
- Obtain and display testimonials only as consented by you (named or anonymous).
- Maintain records required for administration and lawful purposes (e.g., invoices).
- Improve our services and website (basic analytics/cookies).
- Respond to enquiries, prayer requests, or pastoral matters you raise.
POPIA requires that data be collected for specific, explicitly defined and lawful purposes and that people are informed of those purposes.
Lawful Basis
We rely on POPIA’s conditions for lawful processing, including:
- Consent (e.g., submitting a form, opting into communications, granting permission to publish a testimonial).
- Contractual / service need (to schedule, confirm, and deliver sessions or retreat bookings you request).
- Legitimate interests (reasonable, minimal processing to run and secure our ministry site and services).
- Legal obligations (e.g., tax/financial record‑keeping).
POPIA sets conditions such as processing limitation, purpose specification, information quality, openness, security safeguards, and data subject participation.
How we collect information
Directly from you: contact/booking forms, emails, WhatsApp messages, surveys, and during sessions or events.
Automatically: limited website analytics/cookies; see Cookies & Analytics.
Under POPIA, openness requires disclosing how information is collected and used.
Cookie & Analytics
Our website may use minimal cookies/analytics to understand aggregate usage and improve user experience. You can manage cookies in your browser settings. If we enable tools like Google Analytics in future, we will update this policy to name the tool and provide an opt‑out link. POPIA expects you to disclose online data practices and inform users how their data is collected and used.
Children
ABIDE’s services are intended for adults. If a minor participates (e.g., a youth retreat element), we will only process their personal information with the consent of a parent/guardian and in line with POPIA’s heightened protections.
How we share information (operators/third parties)
We do not sell personal information. We may share limited personal information with operators (service providers) who help us run ABIDE—for example:
- Website hosting and email services
- Form/booking or payments platforms
- Cloud document storage
We require operators to safeguard information and process it only on our instructions, consistent with POPIA’s “operator” requirements.
Security Safeguards
We use reasonable, appropriate technical and organisational measures to protect personal information (e.g., access controls, strong passwords, device security, limited retention, operator agreements). POPIA requires responsible parties to implement security safeguards proportionate to the risk. If we become aware of a security compromise likely to put your information at risk, we will notify you and the Information Regulator where required.
How long we keep information
We retain personal information only as long as needed for the purposes stated or as required by law (e.g., financial records). Thereafter, we securely delete or de identify it. POPIA requires that information not be kept longer than necessary for the purpose.
Your rights under POPIA
You may exercise the following rights (subject to lawful limits):
- Access the personal information we hold about you.
- Correction or deletion of inaccurate or unnecessary information.
- Objection to certain processing and withdraw consent (e.g., for testimonials or communications).
- Data portability where feasible (copy of your data).
- Lodge a complaint with the Information Regulator (see below).
POPIA includes “data subject participation” rights and requires a clear way to exercise them.
How to make a request:
Email the Information Officer at vanessa.vermaak@abidejourney.co.za with the subject line “POPIA Request” and tell us which right you wish to exercise. We may need to verify your identity.
Testimonials and Sensitive Topics
Spiritual direction often involves sensitive matters. You are never required to provide a testimonial. If you choose to provide one, we will publish it only as you consented (e.g., first name or anonymous). You can withdraw consent for future use at any time by emailing us. POPIA recognises opinions as personal information and expects explicit consent for such use.
Communications and WhatApps
If you contact us via WhatsApp or similar channels, we will use that information to respond to your enquiry or booking, and we may keep a record for administrative purposes. You can ask us to stop using WhatsApp to contact you at any time.
POPIA requires that personal information be processed for specified, lawful purposes and that people can withdraw consent for direct communications.
Information Regulator
If you believe your POPIA rights have been infringed, you may lodge a complaint with South Africa’s Information Regulator. Visit the Regulator via the POPIA portal for contact details and forms.
Change to this Policy
We may update this Policy to reflect changes in our practices or legal requirements. The latest version will always be available on our website, with an effective date at the top.

