What POPIA requires
- Have a lawful justification, such as consent, a contract, a legal duty or a legitimate interest, before processing personal information.
- Take reasonable steps to make sure people know what you collect, why, and who will receive it, when you collect their information.
- Allow data subjects to access, correct and delete their information.
- Implement reasonable technical and organisational security measures.
- Notify the Information Regulator and affected users of security compromises.
- Register your Information Officer, by default the head of the organisation, with the Information Regulator.
What the banner does here
The same opt-in mode as in the EU and UK: non-essential cookies are blocked until the visitor chooses, with Reject all beside Accept all at the same size, and no pre-ticked boxes.
How GrantCookie covers it
- Scheduled scans. The scanner finds the cookies and trackers your site sets, sorts them into categories and re-checks on every scheduled scan, so the banner asks about what is really there.
- Provable records. Every choice is timestamped and stored with the banner version the visitor saw. Paid plans include consent log export.
- Withdrawing consent. A re-open control stays on every page, so visitors can withdraw or change their choice at any time.
This page is general guidance. It is not legal advice. Check your specific obligations with a qualified adviser.