Hyrox PFT← Back to events

POPIA — Protection of Personal Information

Last updated: June 2025

The Protection of Personal Information Act, 4 of 2013 (“POPIA”) is South Africa's primary data-protection legislation. This page explains how Hyrox PFT complies with POPIA in its collection and processing of personal information.

1. Responsible party

Hyrox PFT is the responsible party as defined in POPIA. We determine the purpose of and means for processing your personal information.

Contact details of the responsible party:
Email: info@hyroxpft.com

2. Information officer

We have designated an Information Officer responsible for ensuring compliance with POPIA within our organisation. You may direct POPIA-related requests or complaints to our Information Officer at the contact address above.

3. Lawful grounds for processing

We process your personal information on the following lawful grounds:

  • Contractual necessity: to fulfil our obligations to you as an athlete registered on the platform, including event administration and result publication.
  • Legitimate interest: to operate, improve, and secure the platform, and to communicate with you about your account.
  • Consent: where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
  • Legal obligation: where processing is required to comply with applicable law.

4. Special personal information

POPIA affords heightened protection to special personal information. We collect date of birth and gender solely for the purpose of placing athletes in the correct age category and division in Hyrox competitions. This information is not used for any other purpose without your consent.

5. Your rights under POPIA

As a data subject under POPIA, you have the right to:

  • Be notified that your personal information is being collected (Section 18).
  • Access the personal information we hold about you (Section 23).
  • Request correction or deletion of inaccurate, misleading, or outdated information (Section 24).
  • Object to the processing of your personal information in certain circumstances (Section 11(3)).
  • Submit a complaint to the Information Regulator (Section 74).
  • Institute civil proceedings for damages suffered as a result of a breach (Section 99).

6. Information Regulator

If you are not satisfied with how we have handled your personal information, you may lodge a complaint with the Information Regulator of South Africa:

7. Security safeguards

We take reasonable technical and organisational measures to prevent loss, damage, unauthorised destruction, unlawful access, processing, or disclosure of personal information, in accordance with Section 19 of POPIA.

8. Trans-border flows

Our platform infrastructure may involve storage or processing of personal information outside South Africa. Where this occurs, we ensure that the recipient country or organisation provides an adequate level of protection, as required by Section 72 of POPIA.

9. Retention and destruction

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, and in accordance with any applicable legal retention obligations. When personal information is no longer required, it is deleted or anonymised securely.

10. Contact

To exercise your POPIA rights or for any queries about our processing of your personal information, contact our Information Officer at: info@hyroxpft.com