Privacy Policy / POPIA Notice

1. Who we are

MzansiReady is a South African motor retail readiness platform. We help candidates prepare for entry into the motor retail industry through online training modules, quizzes, and completion proof. We are a responsible party under POPIA.

Privacy contact: lodershannon@gmail.com

2. What personal information we collect

We only collect information that is necessary to run your learner account and deliver the programme. This includes:

• Your first name and last name
• Your email address
• Your mobile number
• Your province
• A hashed password (we never store your password in plain text)
• Your module progress — which modules you have started, watched, and completed
• Your quiz scores and quiz attempt records
• Payment confirmation records (we do not store full card numbers — payments are processed by Paystack, a PCI-DSS compliant payment provider)
• Consent records — the date, time, and version of any consent you have given us
• Technical data — IP address and device/browser information collected when you register or give consent, for fraud prevention and compliance purposes only

3. Why we collect your information

We collect your information to:

• Create and manage your learner account
• Track your module progress and quiz results
• Process payments for modules you purchase (via Paystack)
• Issue completion proof
• Send you important account or course notifications
• Respond to your support requests
• Meet our legal and compliance obligations under POPIA and applicable payment regulations

We do not collect your information to sell it, share it with advertisers, or pass it to dealerships, employers, or recruiters without your separate, specific written consent.

4. How your learner account is created

When you register, you provide your name, email, mobile number, province, and a password. Before your account is created, you must tick a required consent checkbox confirming that you understand how your information will be used.

We record the exact wording of that consent, along with a timestamp and technical details, so there is a clear record of what you agreed to and when.

5. How module progress and quiz results are stored

Your progress records are stored securely in our database. We record which modules you have started and completed, when you completed them, and what score you achieved in each quiz. This information is used to track your progress, generate your completion proof, and produce completion records.

6. How payment information is processed

Payments are processed by Paystack, a South African payment provider that is PCI-DSS compliant. MzansiReady does not store your full card number, card expiry, or CVV. We receive a payment confirmation reference from Paystack and record whether your payment was successful so that we can unlock the module you purchased.

7. Who can access your information

Your personal information is accessed only by:

• You — through your learner dashboard
• MzansiReady administrators — for platform management, support, and compliance purposes only
• Paystack — for payment processing only
• Supabase — our database and authentication provider, operating under data processing agreements

We do not sell your information. We do not give your information to dealerships, motor groups, OEMs, recruiters, employers, or any other third party.

8. Your results will NOT be shared without your written consent

9. How long we keep your data

We keep your learner account and progress records for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, unless we are required to retain limited records for legal, payment, fraud-prevention, or legitimate business reasons (for example, payment transaction records that we may be required to keep for up to 5 years under South African financial regulations).

Consent records are retained for compliance purposes even after account deletion, because they are a record of a transaction — not personal profile data.

10. Your rights under POPIA

As a data subject under POPIA, you have the right to:

• Know what personal information we hold about you (right of access)
• Request correction of inaccurate information
• Request deletion of your information (right to be forgotten), subject to legal retention obligations
• Object to the processing of your information
• Lodge a complaint with the Information Regulator of South Africa

The Information Regulator of South Africa can be contacted at justice.gov.za/inforeg

11. Account deletion and POPIA requests

12. Changes to this notice

If we make material changes to this Privacy Policy, we will notify you by email or by displaying a notice on your dashboard. The "Last updated" date at the top of this page will always reflect the most recent version.