HelpEdU

This is a draft for design and development purposes. It has not been reviewed or approved by HelpEdU's legal or compliance team and is not yet in effect.

Privacy Policy

1. Who we are

HelpEdU is the platform processing the personal information described in this policy. The exact legal entity name and registration details that will act as the data controller are [Placeholder — not yet determined].

2. What data we collect

We collect the information a Primary Educator provides while setting up a family account - family profile details such as name, contact information, and home address - and, in general terms, Learner profile information the Primary Educator adds on a learner's behalf. A Learner's personal information is collected via, and managed by, their Primary Educator, not directly by the Learner.

3. Legal basis

Our processing is governed by South Africa's Protection of Personal Information Act (POPIA). Section 34 of POPIA prohibits the processing of a child's personal information by default. Section 35 lifts that prohibition only under specific grounds, principally the prior consent of a "competent person" - a parent or legal guardian able to consent on the child's behalf. See "Children's data" below for how this applies to Learner profiles.

4. How we use data

We use the information collected to operate the HelpEdU platform for your family - creating and maintaining your account, enabling the features you use, and communicating with you about your account.

5. Cookies and analytics

HelpEdU may use cookies or similar technologies necessary to keep you signed in and to understand how the platform is used. Specific tooling and configuration details are [Placeholder — not yet determined].

6. Third-party sharing

We do not sell personal information. Any sharing with service providers who help us operate HelpEdU is limited to what is necessary to provide the platform. A specific list of processors is [Placeholder — not yet determined].

7. Cross-border transfer

Where personal information is processed or stored outside South Africa, we aim to ensure it receives an appropriate level of protection consistent with POPIA. Specific transfer destinations and safeguards are [Placeholder — not yet determined].

8. Retention and deletion

How long we retain family and learner information, and our deletion process once it is no longer needed, are [Placeholder — not yet determined].

9. Data subject rights

Under POPIA, you have the right to access the personal information we hold about you, request its correction, request its deletion, and object to certain processing. You also have the right to lodge a complaint with South Africa's Information Regulator if you believe your information has been processed unlawfully.

10. Children's data

As set out under "Legal basis" above, POPIA Section 34 prohibits processing a child's personal information by default, and Section 35 lifts that prohibition only under specific grounds - principally the prior consent of a competent person (a parent or legal guardian). A Learner profile on HelpEdU is added and managed by their Primary Educator; capturing that competent-person consent itself is a separate, not-yet-built piece of the platform and is out of scope for this page.

11. Security measures

We apply reasonable technical and organisational measures to protect personal information against loss, unauthorised access, and disclosure. Specific measures are [Placeholder — not yet determined].

12. Breach notification

If a security compromise occurs that is likely to affect your personal information, we will take reasonable steps to notify you and the Information Regulator as required by POPIA. Our specific notification process is [Placeholder — not yet determined].

13. Contact and Information Officer

POPIA requires an appointed Information Officer to be named as the contact for privacy-related requests and complaints. HelpEdU's Information Officer role is currently unappointed, so contact details cannot yet be provided: [Placeholder — not yet determined].

14. Policy version and effective date

As stated at the top of this page, this is a draft and is not yet in effect. A version number and effective date will be published here once this policy has been reviewed and approved: [Placeholder — not yet determined].