Privacy notice

Version 1.0 · Prepared with reference to the Protection of Personal Information Act 4 of 2013 (POPIA). Contains placeholders that must be finalised before commercial deployment.

1. Responsible party

The responsible party is [PERSPICA LEGAL ENTITY NAME (PTY) LTD], registration number [COMPANY REGISTRATION NUMBER], of [REGISTERED ADDRESS]. The information officer can be contacted at [CONTACT EMAIL ADDRESS].

2. What we collect and why

We process the personal information needed to run a learning platform: your name and email address (account creation and certificates); your learning records, including lesson progress, assessment attempts, scores and written assessment responses (delivering and evidencing the assessed programme); purchase records and payment references (concluding and administering your purchase); and enquiry details you submit through our forms. Payment card details are captured and processed by Payfast, our payment processor, and never reach our systems.

3. Lawful basis

Processing is performed because it is necessary to conclude and perform our contract with you, to comply with legal obligations including tax and financial record-keeping, and in pursuit of our legitimate interests in securing the platform and protecting the integrity of the credential.

4. Operators and sharing

We use carefully selected operators to deliver the service: Supabase (authentication and database hosting), Vercel (application hosting), Payfast (payment processing) and Resend (transactional email). Each processes personal information on our instructions. Certain operators process information outside South Africa; where they do, transfers rely on section 72 of POPIA, including contractual protections that uphold substantially similar safeguards. We do not sell personal information, and we do not use it for third-party advertising.

5. Certificate verification

Certificate verification is public by design: entering a certificate number displays the certificate holder’s name, the certificate tier, the issue date and its validity status. By earning a certificate you consent to this limited disclosure, which exists to protect the value of your credential.

6. Retention

Account and learning records are retained while your account is active. Assessment and certificate records are retained for as long as the certificate remains verifiable. Financial records are retained for the periods tax legislation requires. You may request deletion of your account; records we must keep by law, and the minimal record needed to keep an issued certificate verifiable, are retained.

7. Your rights

Under POPIA you may request access to, correction of, or deletion of your personal information, and you may object to processing in certain circumstances. Requests go to the information officer at [CONTACT EMAIL ADDRESS]. You may also lodge a complaint with the Information Regulator (South Africa) at complaints.IR@inforegulator.org.za.

8. Security

We apply appropriate technical and organisational measures, including encrypted transport, row-level access controls on the database, and server-side verification of all payment notifications. Should a security compromise affecting personal information occur, we will notify the Information Regulator and affected data subjects as section 22 of POPIA requires.

9. Cookies

We use only the cookies necessary to keep you signed in. We do not use advertising or cross-site tracking cookies.