1. Our Commitment
eduSYMS (Pty) Ltd is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPI Act). We process personal information lawfully, reasonably, and in a manner that does not infringe on your privacy rights.
2. Information We Collect
- Identity Information: Name, ID number, registration number
- Contact Information: Email addresses, phone numbers, physical addresses
- Educational Information: Academic records, enrollment data, performance metrics
- Technical Information: IP addresses, browser information, device information
- Financial Information: Payment details for subscription services
3. Purpose of Processing
We process personal information for the following purposes:
- Providing education management services
- Managing student and staff records
- Processing payments and maintaining accounts
- Communicating about our services
- Complying with legal obligations
- Improving our products and services
4. Information Security
We implement appropriate technical and organizational measures to secure personal information against:
- Unauthorized access or processing
- Accidental loss or destruction
- Unlawful disclosure or access
- Malicious attacks and data breaches
5. Data Subject Rights
Under the POPI Act, you have the right to:
- Request access to your personal information
- Request correction or deletion of your personal information
- Object to the processing of your personal information
- Request restriction of processing
- Lodge a complaint with the Information Regulator
6. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Educational records are typically retained for 7 years after graduation or departure.
7. Cross-Border Transfers
When we transfer personal information outside South Africa, we ensure adequate protection through appropriate safeguards in compliance with the POPI Act, including Microsoft Azure cloud services with adequate protection measures.