POPIA notice

Responsible party

Under POPIA, Sino Tutor is the responsible party for the personal information processed through the platform. This means we determine why and how your information is processed, and we are accountable for doing so lawfully. We process personal information fairly, in a way that does not unjustifiably infringe your privacy, and only where we have a lawful basis to do so.

The eight conditions for lawful processing

POPIA sets out eight conditions for the lawful processing of personal information. Here is how each one applies to Sino Tutor.

• Accountability. We take responsibility for meeting these conditions whenever we process your information.
• Processing limitation. We collect only the information we actually need, for a lawful purpose, and on a lawful basis such as your consent or the performance of our agreement with you.
• Purpose specification. We collect information for the specific, defined purposes set out in our Privacy policy, such as creating your account, matching you with tutors and processing bookings.
• Further processing limitation. We do not use your information later in ways that are incompatible with the purposes for which it was first collected.
• Information quality. We take reasonable steps to keep the information we hold accurate, complete and up to date, and you can help by keeping your own details current.
• Openness. This notice and our Privacy policy are how we keep you informed about what we do with your information.
• Security safeguards. We use appropriate technical and organisational measures to protect your information against loss, unauthorised access and misuse.
• Data subject participation. You can ask what information we hold about you, and you can ask us to correct or delete it.

Special personal information and children

Some information enjoys extra protection under POPIA. When tutors upload identity documents or qualifications so that we can verify them, we process that special personal information only where POPIA permits it, for the purpose of vetting, and with appropriate safeguards. Because the platform supports learners from Grade 1 upwards, we also process the information of children, and we expect a parent or guardian to provide the necessary consent and to oversee a minor's account.

Your rights as a data subject

POPIA gives you a number of rights, which you can exercise at any time. You have the right:

• to be notified that we are collecting your information, and where it is collected from another source;
• to ask whether we hold information about you and to request access to it;
• to ask us to correct or delete information that is inaccurate, irrelevant, excessive or out of date;
• to object, on reasonable grounds, to the processing of your information;
• to withdraw consent you have previously given, where our processing relies on consent;
• not to be subject to a decision based solely on automated processing where it has legal or similarly significant effects;
• to lodge a complaint with the Information Regulator.

You can manage much of your information directly in your settings, including exporting your data, or contact us using the details below.

Contact and complaints

To exercise any of your rights, or if you have a concern about how we handle your personal information, please reach us via our contact page, and we will respond as soon as we reasonably can.

You also have the right to lodge a complaint with the Information Regulator of South Africa, which oversees compliance with POPIA. We would, however, appreciate the chance to address your concern directly first.