Before you start
Use this form to exercise your privacy rights with Bona under South Africa’s POPIA, UK GDPR or the EU GDPR, Thailand’s PDPA, Japan’s APPI or Kenya’s Data Protection Act. You can ask what information we hold about you and for a copy of it, ask us to correct it or delete it, object to how we use it, or tell us to stop emailing you. There is no fee.
Helped by a business that uses Bona? If you were helped on a business’s website through Bona, that business is responsible for your information, and we only process it on its behalf (we are its operator, or processor). Please contact that business first. You can still send this form: we’ll pass your request on and help the business respond.
We don’t ask for ID numbers or documents here. We confirm who you are by email, and ask for more only if we need it. Prefer email? Write to our information officer at [email protected], starting the subject with “Information officer”.
Send a request
Request sent
Your reference is . We’ve emailed an acknowledgement to .
Not there in a few minutes? Check your spam folder, or email [email protected] with your reference.
What happens next
- We acknowledge it. As soon as you send the form, we email you an acknowledgement with your reference number.
- We confirm it’s you. Before we act, we may ask you to confirm the request by replying from your email address, or for a little more information if we need it. If you act for someone else, we’ll ask for proof that you may.
- We reply within 30 days, or sooner where your law asks for it. If the law lets us take longer, for example for a complex request, we’ll tell you why within those 30 days. There is no fee.
- If we can’t do everything you ask, we’ll explain why. For example, the law may require us to keep tax records.
- If it’s about a business that uses Bona, we pass your request to that business and help it respond.
If you’re not happy with our reply
Please tell us, and we’ll try to put it right. You can also complain to the data protection regulator where you live:
- South Africa: the Information Regulator.
- United Kingdom: the Information Commissioner’s Office (ICO).
- The EU and the EEA: your country’s data protection authority. The European Data Protection Board lists them.
- Thailand: the Personal Data Protection Committee (PDPC).
- Japan: the Personal Information Protection Commission (PPC).
- Kenya: the Office of the Data Protection Commissioner (ODPC).
Official forms in South Africa
If you’re in South Africa, you can also use the official forms under the POPIA regulations instead of this page: Form 1 to object to processing, or Form 2 to ask us to correct or delete your information. The Information Regulator publishes them. Email the completed form to [email protected], starting the subject with “Information officer”.
To ask for other records we hold, rather than your own personal information, see our PAIA manual.