Privacy Policy

Last updated: July 2026 | POPIA Compliant

1. Introduction

Collanduni, operated by Helpdesk Central (Pty) Ltd. ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa. This Privacy Policy explains how we collect, use, store, and protect your information.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Full name and surname
• Email address
• Phone number
• Date of birth
• South African ID number
• Physical address
• Gender
• Population group (for statistical purposes)

2.2 Academic Information

• School name and grade
• Subject marks and levels
• Matric results
• APS score

2.3 Documents

• Certified ID copy
• School reports
• Proof of residence
• Next of kin ID

2.4 Application Data

• Selected institutions and courses
• Application status
• Payment information
• Communication with institutions

3. How We Use Your Information

We use your information to:

• Process and submit your applications to educational institutions
• Calculate your APS score and check eligibility
• Communicate with you about your applications
• Process payments for application fees
• Provide customer support
• Improve our services
• Comply with legal obligations

4. Legal Basis for Processing (POPIA)

We process your personal information based on:

• Consent: You explicitly consent to processing when you register and submit applications
• Contractual necessity: Processing is necessary to fulfill our service agreement with you
• Legal obligation: We may process data to comply with South African law

5. Data Sharing

5.1 Educational Institutions

We share your application data with the institutions you select. This includes your personal details, academic records, and supporting documents.

5.2 Service Providers

We may share data with:

• Payment processors (Paystack) for transaction processing
• Cloud storage providers (Cloudflare R2) for document storage
• Supabase for database and authentication services

5.3 No Selling of Data

We do NOT sell your personal information to third parties.

6. Data Security

We implement the following security measures:

• Encrypted data transmission (HTTPS/SSL)
• Secure password hashing
• Access controls and authentication
• Regular security audits
• Secure cloud infrastructure

7. Data Retention

We retain your data for:

• Active accounts: Duration of account plus 2 years
• Application data: 5 years after last activity
• Payment records: 7 years (tax requirements)
• Documents: Until you delete them or account is closed

8. Your Rights (POPIA)

Under POPIA, you have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Objection: Object to processing of your data
• Portability: Request your data in a portable format
• Withdraw consent: Withdraw consent at any time

9. Cookies

We use cookies for:

• Session management
• Preferences storage
• Analytics (Google Analytics)

You can control cookies through your browser settings.

10. Children's Privacy

Our services are intended for users aged 15 and above. We do not knowingly collect data from children under 15 without parental consent.

11. International Transfers

Your data may be processed in countries outside South Africa (e.g., by Supabase). We ensure appropriate safeguards are in place.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or platform notification.

13. Contact Us

For privacy-related inquiries or to exercise your rights:

• Information Officer: Collanduni Privacy Team
• Email: info@collanduni.co.za
• Phone: +27 63 024 2558
• Address: 2041 Msizi Dube Road, Lamontville, Durban, 4027, South Africa

14. Complaints

If you believe we have not handled your personal information correctly, you have the right to lodge a complaint with the Information Regulator of South Africa:

• Website: inforegulator.org.za
• Email: complaints.IR@justice.gov.za