Privacy notice

Version 1.0 · Effective 24 July 2026 · Issued under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Responsible party

The responsible party is Nicolene Renske Steyn ("the Promoter"), who operates Perspica on behalf of NRS TECH VENTURES, a company not yet incorporated, reference number 9463120280, in accordance with section 21 of the Companies Act 71 of 2008. Upon incorporation and ratification of the pre-incorporation agreements, the Company will become the responsible party and this notice will be updated. The Promoter is also the Information Officer. The address for service of legal documents is Unit 3, Cedar Park, 24 Cedar Street, Bryanston, Johannesburg, 2191. The Information Officer can be contacted at perspica@proton.me. Our manual under the Promotion of Access to Information Act 2 of 2000 is available on the PAIA manual page.

2. What we collect and why

We process the personal information needed to run a learning platform: your name and email address (account creation and certificates); your learning records, including lesson progress, assessment attempts, scores and written assessment responses (delivering and evidencing the assessed programme); purchase records and payment references (concluding and administering your purchase); and enquiry details you submit through our forms. Payment card details are captured and processed by Payfast, our payment processor, and never reach our systems.

3. Lawful basis

Processing is performed because it is necessary to conclude and perform our contract with you, to comply with legal obligations including tax and financial record-keeping, and in pursuit of our legitimate interests in securing the platform and protecting the integrity of the credential.

4. Operators and sharing

We use carefully selected operators to deliver the service: Supabase (authentication and database hosting), Vercel (application hosting), Payfast (payment processing) and Resend (transactional email). Each processes personal information on our instructions. Certain operators process information outside South Africa; where they do, transfers rely on section 72 of POPIA, including contractual protections that uphold substantially similar safeguards. We do not sell personal information, and we do not use it for third-party advertising.

5. Certificate verification

Certificate verification is public by design: entering a certificate number displays the certificate holder’s name, the certificate tier, the issue date and its validity status. By earning a certificate you consent to this limited disclosure, which exists to protect the value of your credential.

6. Retention

Account and learning records are retained while your account is active. Assessment and certificate records are retained for as long as the certificate remains verifiable. Financial records are retained for the periods tax legislation requires. You may request deletion of your account; records we must keep by law, and the minimal record needed to keep an issued certificate verifiable, are retained.

7. Your rights

Under POPIA you may request access to, correction of, or deletion of your personal information, and you may object to processing in certain circumstances. Requests go to the Information Officer at perspica@proton.me. You may also lodge a complaint with the Information Regulator (South Africa) at complaints.IR@inforegulator.org.za.

8. Security

We apply appropriate technical and organisational measures, including encrypted transport, row-level access controls on the database, and server-side verification of all payment notifications. Should a security compromise affecting personal information occur, we will notify the Information Regulator and affected data subjects as section 22 of POPIA requires.

9. Cookies

We use only the cookies necessary to keep you signed in. We do not use advertising or cross-site tracking cookies.