Privacy Policy

1. Responsible Party Information

Responsible Party: StandX Educational Platform (Pty) Ltd

Registration Number: [Your South African Company Registration]

Physical Address: [Your South African Business Address]

Email: [email protected]

2. Collection of Personal Information

2.1 Types of Personal Information Collected

We collect the following personal information (POPIA Section 1):

• Contact Information: Email address (for educational content access)
• Account Information: Username, password (encrypted)
• Technical Information: IP address, browser type, device information
• Usage Information: Pages visited, features used, time spent
• Educational Data: Course progress, quiz results, learning patterns

2.2 Lawful Processing Conditions (POPIA Section 11)

We process personal information based on the following lawful conditions:

• Consent: When you subscribe to educational content (Section 11(1)(a))
• Contract Performance: To provide educational platform services (Section 11(1)(b))
• Legitimate Interests: Platform improvement, security, analytics (Section 11(1)(f))
• Legal Obligation: Compliance with South African laws (Section 11(1)(c))

3. Purpose of Processing (POPIA Section 13)

We process personal information for specific, explicitly defined purposes:

• Providing access to educational content and resources
• Personalizing learning experience and recommendations
• Platform security and fraud prevention
• Analytics and platform improvement
• Communication about platform updates
• Compliance with legal obligations

4. Your POPIA Rights (Chapter 3)

Under POPIA, you have the following rights:

• Right to Access (Section 23): Request confirmation of personal information held
• Right to Correction (Section 24): Request correction of inaccurate information
• Right to Deletion (Section 24): Request deletion of personal information (with limitations)
• Right to Object (Section 11(3)): Object to processing of personal information
• Right to Complain (Section 74): Lodge a complaint with the Information Regulator
• Right to Withdraw Consent (Section 11(2)): Withdraw consent at any time

5. Information Security (POPIA Section 19)

We implement appropriate technical and organizational measures to secure personal information:

• Encryption of data in transit (SSL/TLS)
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures
• Data backup and recovery systems

6. Data Sharing & Third Parties

6.1. We may share personal information with:

• Service Providers: Under written operator agreements (Section 20)
• Legal Authorities: When required by South African law
• Educational Partners: With consent for specific educational purposes

6.2. We do not sell personal information to third parties.

7. Cross-Border Transfers (POPIA Section 72)

If personal information is transferred outside South Africa, we ensure:

• The recipient country has adequate data protection laws, or
• The recipient agrees to POPIA-equivalent protections, or
• You provide informed consent for the transfer

8. Data Retention (POPIA Section 14)

We retain personal information only as long as necessary:

• Active Accounts: While account is active
• Legal Requirements: As required by South African laws (up to 5-10 years)
• Educational Purposes: As needed for educational platform functionality
• Upon Request: Deleted upon valid deletion request (subject to legal requirements)

9. Automated Decision Making

We do not use solely automated decision-making that produces legal effects concerning you (POPIA Section 71).

10. Direct Marketing (POPIA Section 69)

We only send direct marketing communications:

• With your prior consent, or
• If you are an existing customer and we market similar services
• With an easy opt-out mechanism in every communication

11. Information Regulator Contact

You may contact the South African Information Regulator:

Information Regulator of South Africa
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
P.O Box 31533, Braamfontein, Johannesburg, 2017
Email: [email protected]
Website: https://www.justice.gov.za/inforeg/

12. Changes to This Policy

We may update this policy. Significant changes will be notified via email or platform notice.

13. Contact Information

For POPIA-related inquiries or to exercise your rights:

Information Officer: [email protected]

General Privacy: [email protected]

Response Time: We respond to POPIA requests within 30 days (Section 23).