Vodacom , not complying with the POPPI act

Just received and an sms say my order has been successfully processed and their courier will send me a way bill .. I did not order anything from vodacom why would they send me such a sms When I called the they confirmed an online agent Named Joyce SS , place an order in my name , I am not sure who she spoke to because is was definitely not me .

I asked the agent I was speaking to as to how can people place orders in other peoples names she said told be because i have a profile with Vodacom, so just because I have a profile with your company that mean anyone can order in my name ? What happened to the POPPI act ? my information is not protected because an agent was able to order something for someone using my profile