Privacy notice
Version of 2 November 2026
This notice explains what REA does with the details you give when you register your interest on this website, as the Protection of Personal Information Act 4 of 2013 (POPIA) requires.
Who is responsible
REA, the Record of Environmental Authorisations, is run by Salix AI (Pty) Ltd (registration number 2023/622683/07) while it is being built. Salix AI is the responsible party for your details. If REA moves to a company of its own, your details move with it, and we will tell you before that happens.
Address: Ironwood Ballywoods Office Park, 33 Ballyclare Drive, Bryanston, Gauteng, 2191.
Information officer: Murray Crichton, at records@reasouthafrica.com.
What we collect
- Your name and email address.
- Your organisation, if you give it.
- The option you chose for who you are (for example, practitioner or researcher).
- What you would use REA for, if you tell us.
- The date you registered and the version of this notice you agreed to.
We do not record your IP address with your registration, and this website sets no cookies and runs no analytics or tracking. The company that serves the website keeps standard request logs, which include IP addresses, for its own security and operation (see "Where your details are kept").
Why we collect it
Only to contact you about REA: to tell you when there is something to show you, to ask for your views, and, if you tell us you are interested, to invite you to test it. We will not use your details for anything else, we will not sell them, and we will not pass them to anyone for their own marketing.
We rely on your consent, which you give by ticking the box on the form. You can withdraw it at any time.
Where your details are kept
Your registration goes straight from your browser to REA's own service and database in Microsoft Azure's South Africa North region, in Johannesburg. It does not leave South Africa.
The website itself is served by Vercel, whose servers outside South Africa keep request logs of visits. Vercel processes those logs under data processing terms that give protection similar to POPIA's, as section 72 of the Act allows.
How long we keep it
Until you ask us to remove it, or two years after we last contacted you, whichever comes first. At that point we delete it.
If you make a privacy request, we keep a record of it and of our answer, including your name and email address, for five years, so that we can show how we dealt with it. This is true even when you ask us to delete your registration.
Your rights
You may ask to see the details we hold about you, to correct them, or to have them deleted, and you may withdraw your consent at any time. Use the form below, or write to records@reasouthafrica.com. We will act on your request within 30 days.
If you are not satisfied with how we handle your details, you may complain to the Information Regulator of South Africa (inforegulator.org.za).
Make a request
We will reply to the email address you give. Before we show or change any details, we may ask you to confirm that the address is yours.
Your request is recorded.
We will reply to the email address you gave within 30 days.
Changes to this notice
If we change this notice, we will publish the new version here with its date. If a change affects how we use details you have already given, we will ask for your consent again.