Privacy Notice (POPIA)
Saving Grace Education Group (“SGEG”, “we”, “us” or “our”) is committed to processing personal information lawfully, transparently and securely in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). This notice explains how we collect, use, store and share personal information through our website, enrolment services and Student Portal.
Information we collect
We may collect:
- Parent, guardian, learner and staff contact details, including names and email addresses.
- Learner academic information, including attendance, progress records, assessment results, course enrolments and assignment submissions.
- Information made available through Canvas LMS for the purpose of academic administration and reporting.
- Information provided when a parent or guardian contacts us, makes an enquiry, enrols a learner or requests support.
- Website and device information collected through cookies or similar technologies, where applicable and subject to cookie preferences.
Why we use personal information
We use personal information to:
- Provide educational, enrolment, administration and academic-reporting services.
- Generate and share learner progress reports with authorised parents, guardians and staff.
- Manage access to the Student Portal and provide support.
- Communicate important updates about learner progress, enrolment and use of our services.
- Meet legal, contractual and record-keeping obligations.
- Improve the operation, security and reliability of our website and systems.
We do not sell, rent or trade personal information.
Service providers and sharing
We use trusted service providers to operate our systems, including:
- Amazon Web Services (AWS) for hosting infrastructure.
- Supabase for authentication and user management.
- Canvas LMS for synchronising academic records.
These providers may process personal information only as necessary to provide services to SGEG and subject to appropriate confidentiality and security obligations. We may also disclose information where required by South African law or to protect the rights, safety or property of SGEG, learners or others.
International processing
Where a service provider processes personal information outside South Africa, SGEG will take reasonable steps to ensure that the transfer is permitted by POPIA and that appropriate safeguards are in place.
Security
We apply reasonable technical and organisational safeguards to protect personal information. These include secure access controls, role-based access to learner data and encryption of data in transit using TLS. No online system can be completely secure, but we continually work to protect information from unauthorised access, loss, misuse or disclosure.
Retention
Personal information and academic records are retained for the duration of a learner's enrolment and for two years after enrolment ends, unless a longer retention period is required or permitted by law, a contractual obligation, a dispute or legitimate record-keeping requirements. We then securely delete or anonymise the information where appropriate.
Children and learning-support information
SGEG provides educational services to learners, including children. Parents or legal guardians must provide or authorise information relating to a child where required. Information concerning a learner's health, disability, learning support or special educational needs is handled with additional care and only where necessary to provide appropriate educational services or meet legal obligations.
Your rights
Subject to POPIA and applicable law, you may request access to personal information held about you or your child, request correction of inaccurate information, request deletion where SGEG is not required or entitled to retain it, withdraw consent where processing is based on consent, or object to certain processing.
To make a request or ask a privacy question, email info@savinggraceeducation.co.za.
Complaints
If you are not satisfied with how SGEG has handled your personal information, please contact us first at info@savinggraceeducation.co.za. You may also lodge a complaint with the Information Regulator of South Africa at https://inforegulator.org.za.