Privacy notice
Personal information, under POPIA.
This notice covers two different sets of people: visitors who send us an enquiry, and learners whose information appears on this site. They are handled differently and both are set out below.
Last updated [CLIENT: date this notice was last reviewed].
Who is responsible
The responsible party for personal information processed through this site is [CLIENT: OneAll Human Capital registered entity name and registration number], at [CLIENT: registered address]. Training is delivered by [CLIENT: MRC registered entity name and registration number], which is a separate responsible party for learner records held in the course of training.
The Information Officer is [CLIENT: Information Officer name and email, as registered with the Information Regulator].
If you send us an enquiry
The form on the contact page collects your name, the company you are with, your role, your work email address, your phone number if you give one, the cohort size you are considering, and whatever you write in the message field. It also records the page you submitted from, the campaign parameters in the link that brought you here if there were any, your IP address and the country your request came from.
Why we collect it
To respond to your enquiry and to hold the conversation you asked for. That is the only purpose. We do not run a newsletter from this site, we do not sell or rent contact details, and we do not pass them to any party other than the processors listed below.
Where it goes
- Cloudflare — hosts this site and stores the submission durably so that it cannot be lost if a later step fails.
- Brevo — sends the notification email that tells our team an enquiry has arrived.
- Our CRM, a self-hosted Twenty instance at mrcrm.org.za — where the enquiry is filed so that someone owns following it up.
Each of these acts as an operator on our instructions. Cloudflare and Brevo process data outside South Africa; where that is the case, the transfer is made on the basis of the safeguards in those providers' data processing terms.
How long we keep it
Enquiries are retained for [CLIENT: retention period for enquiry records], after which they are deleted from the CRM and from storage. If you ask us to delete an enquiry sooner, we will.
The IP address and the honeypot
Your IP address is recorded with the submission and is briefly used to limit how often the same address can submit, which is how the form resists automated abuse. The form also carries a hidden field that a person never sees and never fills in. Neither is used to profile you.
If you are a learner or graduate of the programme
Learner names, photographs, qualifications, absorbing firm and personal accounts appear on this site — on the results page — only where written consent has been given for that specific publication.
Consent is documented, is specific to publication on this site, and can be withdrawn at any time by writing to the Information Officer. Withdrawal takes effect on the site at the next deployment and does not require a reason. Withdrawing it has no effect on a learner's place in the programme, their placement, or any reference we would give.
Retention and outcome figures on this site are reported as counts and rates only. They are not published in a form that identifies an individual, and a learner who has not consented to be named still appears in the denominator.
Your rights
- To be told what personal information we hold about you, and to be given a copy of it.
- To have information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained corrected or deleted.
- To object to processing, and to withdraw consent where consent is what we relied on.
- To complain to the Information Regulator.
Write to the Information Officer above to exercise any of these. We will respond within the period POPIA allows.
The Information Regulator
Information Regulator (South Africa) — complaints may be lodged directly at inforegulator.org.za. You do not have to come to us first, though we would rather you did.
Cookies and analytics
This site sets no cookies. Campaign parameters from a link are held in your browser's session storage for the duration of your visit so that an enquiry can be attributed to the campaign that brought you, and are discarded when you close the tab. Cloudflare may set cookies of its own as part of serving and protecting the site.
Changes to this notice
If this notice changes materially we will update the date at the top of it. The current version is always the one at this address.