Sends faxes, in Lesotho

Data Protection Act, 2011, ss. 25-27, 50 (rights of data subjects) · Read the law's page

• Give a data subject notice, before or as soon as practicable after collecting personal information about them, of your name and address, the purpose of the collection, whether supply is mandatory, and the consequences of not providing it.
• Confirm free of charge, on request from a data subject who proves their identity, whether you hold personal information about them, and provide it in a reasonable manner, format and prescribed time.
• Give a data subject written reasons where you deny an access request, and let them challenge those reasons.
• Correct, destroy, or delete personal information on a data subject's request within 14 days where it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained, and tell anyone the changed information was disclosed to within 7 working days of the correction where it affects a decision about the data subject.
• Stop processing a data subject's personal information for direct marketing as soon as they give you notice requiring you to cease or not begin such processing.