Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information in compliance with South African POPIA legislation.

Last updated: 7 October 2025

POPIA Compliance

This privacy policy complies with the Protection of Personal Information Act (POPIA) of South Africa. We are committed to protecting your personal information and ensuring your privacy rights are respected.

1. Information We Collect

Personal Information

We collect the following personal information to provide our university application services:

  • Full name and surname
  • South African ID number
  • Email address
  • Phone numbers (primary and secondary)
  • Physical address and postal code
  • School information and academic details
  • Preferred contact times

Document Information

We process the following documents on your behalf:

  • South African ID document
  • Matric certificate or equivalent
  • Grade 11 certificate
  • Additional supporting documents as required by universities

Payment Information

Payment processing is handled securely by our payment gateway partner (Paystack). We do not store your credit card details or banking information on our servers.

2. How We Use Your Information

We use your personal information solely for the purpose of providing our university application services:

Application Processing

Submit university applications on your behalf using your personal information and documents.

Communication

Contact you regarding your application status, deadlines, and any required actions.

Account Management

Maintain your user account and provide access to application tracking features.

Service Improvement

Analyze usage patterns to improve our services and user experience.

Marketing Communications

We may contact you with marketing communications only if you have opted in. You can opt out at any time by clicking the unsubscribe link in our emails or contacting us directly.

3. Data Protection and Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

  • SSL encryption for all data transmission
  • Secure cloud storage with access controls
  • Regular security updates and monitoring
  • Secure payment processing (PCI DSS compliant)

Administrative Safeguards

  • Limited access to personal information
  • Staff training on data protection
  • Regular security audits
  • Incident response procedures

AI Training Prohibition

We do not use your personal data to train artificial intelligence systems.Your information is used solely for the purpose of providing our application services and is not shared with AI training platforms or used for machine learning purposes.

4. Your Rights Under POPIA

Under the Protection of Personal Information Act (POPIA), you have the following rights:

1

Right to Access

Request a copy of the personal information we hold about you.

2

Right to Correction

Request correction of inaccurate or incomplete personal information.

3

Right to Deletion

Request deletion of your personal information (subject to legal obligations).

4

Right to Object

Object to processing of your personal information for marketing purposes.

5

Right to Data Portability

Request transfer of your personal information to another service provider.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

5. Data Sharing and Third Parties

We may share your personal information only in the following circumstances:

University Applications

We share your information with universities and tertiary institutions to submit applications on your behalf. This is the primary purpose of our service.

Payment Processing

We share payment information with our secure payment gateway (Paystack) to process transactions. We do not store your payment details.

Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

We Do NOT Share Your Data With:

  • • Marketing companies for advertising purposes
  • • AI training platforms or machine learning services
  • • Data brokers or third-party analytics companies
  • • Social media platforms for targeted advertising

6. Data Retention

We retain your personal information for the following periods:

Application Data

Personal information and documents used for applications

5 years

Account Information

User account data and preferences

Until account deletion

Payment Records

Transaction records and payment history

7 years

Marketing Preferences

Opt-in/opt-out preferences for communications

Until withdrawn

Note: We may retain certain information longer if required by law or for legitimate business purposes. You can request deletion of your data at any time, subject to legal obligations.

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our website:

Essential Cookies

Required for website functionality, user authentication, and security. These cannot be disabled.

Analytics Cookies

Help us understand how visitors use our website to improve our services. You can opt out of these.

Preference Cookies

Remember your settings and preferences to provide a personalized experience.

Cookie Management: You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect website functionality.

8. International Data Transfers

Your personal information is primarily processed within South Africa. However, some of our service providers may be located outside South Africa:

Payment Processing

Our payment gateway (Paystack) may process data in other countries with adequate data protection measures.

Cloud Services

We use secure cloud services that may store data in countries with adequate data protection laws.

Safeguards: When transferring data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions by relevant data protection authorities.

9. Children's Privacy

Our services are designed for individuals who are at least 18 years old or have parental consent. We do not knowingly collect personal information from children under 18 without parental consent.

Parental Consent: If you are under 18, you must have parental or guardian consent to use our services. Parents or guardians can contact us to review, modify, or delete their child's personal information.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending you an email notification (if you have provided an email address)
  • Displaying a notice on our website

Your Continued Use: Your continued use of our services after any changes to this policy constitutes acceptance of the updated terms.

11. Contact Information

If you have any questions about this privacy policy or our data practices, please contact us:

Response Time

We aim to respond to all privacy-related inquiries within 5 business days.

Data Protection Officer

For complex privacy matters, you can request to speak with our Data Protection Officer.

This privacy policy is effective as of 7 October 2025and complies with the Protection of Personal Information Act (POPIA) of South Africa.