Overview

This Privacy Policy governs how Yenza Career Technology (Pty) Ltd ("Yenza", "We", "Us", "Our") processes personal information in accordance with applicable data protection laws and in connection with our Services. Your use of our Services is subject to this Policy. This Policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA).

This Privacy Policy describes how Yenza Technology (Pty) Ltd collects, uses and discloses your information when you use our website https://yenzacareers.com. By using the Service, you consent to this Privacy Policy. If you do not consent, please do not use the Service.

If you are a minor, your use of our Services is subject to this Policy. Your competent person (any person who is legally competent to consent to any action or decision being taken in respect of any matter concerning a child) must provide consent before you use our Services.

Access to our platform for minors is only possible through a licence code, which is issued exclusively to institutions, schools, or competent persons acting on behalf of the minor. By obtaining and distributing a licence code, the competent person confirms their consent to the minor's use of our Services and the processing of the minor's personal information as described in this Policy. No minor can self-register or access the platform without a licence code issued through this process.

Our commitment

We process your personal information lawfully, accountably and transparently. Please read this Policy carefully and contact us with any questions about our privacy practices. We may amend this Policy at any time, with amendments taking effect immediately upon publication. Please check our websites and digital platforms regularly for updates.

By using our Services, you confirm that you have read, understood and accept this Policy.

For enquiries, please contact our Information Officer: Farrel Strul — privacy@yenzacareers.com

1. When we process personal information

We process personal information only where: you have consented (which you may withdraw anytime); processing is necessary for our or third parties' legitimate interests; and/or we have another lawful basis for processing.

2. Consents and purposes for processing personal information

To provide our Services, we collect your personal information. You consent to this collection for the general purpose of providing our Services.

If you are under 18, you expressly warrant (promise) that your competent person has consented to your use of our Services before you submit personal information.

2.1 Purposes for processing and consents

We process personal information collected to provide our Services. Our collection purposes include to:

• operate and provide our Services;
• identify you when logging into your account;
• inform you about services, features, newsletters, offers, contests and events you may find useful or have requested;
• market our services and products if you've opted in (you may opt-out anytime);
• understand your needs, diagnose problems, analyse trends, and improve service features and usability;
• maintain security and verify account authentication;
• communicate about your account;
• verify your identity and information accuracy;
• comply with legal requirements;
• personalise content delivery;
• send targeted messages of interest; and
• track your learning progress.

Marketing. We only send marketing communications with your explicit consent. Every marketing message includes an unsubscribe option. We never share your data for third-party marketing.

You consent to us retaining your personal information for aggregate, statistical and reporting purposes. This information will be de-identified and cannot personally identify you.

These purposes rely on the following lawful bases:

• Service delivery — contract performance;
• Marketing — explicit consent;
• Security and fraud prevention — legitimate interest;
• Legal compliance — legal obligation.

2.2 Competent person consent and special personal information

Where we collect and process special personal information (outlined in Section 3), you provide explicit consent to such processing. Special personal information we collect includes psychological and psychometric assessment data (worker type, personality traits, cognitive ability, emotional intelligence, values, and learning style profiles) generated through our assessment tools. This data is used solely for career guidance and content personalisation purposes.

If you are a minor using our Services, you warrant (promise) that your competent person has consented to your use for the purposes listed in Section 2.1.

You consent to us processing your personal information for each purpose listed in Section 2.1.

2.3 Withdrawal of consents

You may object to any purposes listed in Section 2 following the procedure in Section 5.

To revoke all consent and have your personal information deleted, contact our Information Officer.

3.1 What information we collect

We collect personal information when you create an account, visit our websites, or interact with us electronically or in person. We will collect and process the following personal information about you:

• name, age, gender, sex, nationality, and identifying numbers;
• physical and email addresses and contact numbers;
• online identifiers and your online behaviour such as cookies and IP addresses;
• academic and employment information including work history, achievements, awards, education history, interests, skills, references, qualifications, grades and educational plans;
• lesson interactions and submissions including quizzes, surveys, assessments and exercise submissions;
• notes you make and notes by your teacher and/or advisor;
• other personal information including psychometric assessments for career and content matching (with your explicit consent);
• your parent's / guardian's name, email address and cell phone number when inviting them to access your account.

3.2 Automatically collected information

We also automatically collect:

• IP address and derived information (geographic location, company, access times);
• device information (type, version, mobile identifier, browser, operating system, applications, language preferences);
• behavioural or demographic attributes linked to your personal information;
• usage data (pages visited, content accessed, time spent, downloads, frequency of access, search terms used);
• transaction data (products and services enquired about or used);
• support activities and logged issues;
• website and platform navigation and service usage;
• aggregated data about feature usage, errors and problems.

3.3 Accuracy of personal information

You warrant that personal information you provide is accurate and current. You agree to indemnify us and our representatives against any claims, damages or liabilities arising from inaccurate information we use or rely upon. You must immediately notify us if your personal information is unlawfully obtained by others without consent, or if you provided another person's information without their consent.

4.1 Further processing

We will not use personal information for purposes incompatible with those in Section 3 without your consent or another lawful basis.

If a further purpose is incompatible with the original purposes above, we may update this Policy accordingly.

4.2 Sharing of personal information

We do not sell, rent or trade your personal information to third parties not listed in this Policy. We only share personal information with our operators, collaborators and partners as set out in this Policy and in accordance with applicable data protection laws. We prohibit them from using personal information for unlisted purposes. We may share personal information as follows.

Access to your data is restricted to:

• Yenza Career Technology employees authorised to access personal information only as necessary for their job functions and applicable purposes;
• advisers, teachers, educators and institution administrators that your school/college/centre/institution has explicitly chosen to grant access to;
• our partners who sign a Data Sharing Agreement with us to protect your personal information — including D6 Communicator (used for school communication and parent notifications); and
• our operators listed below, who process data on our behalf under data processing agreements.

In certain legal situations we may be required to share your data.

Our current operators and their roles:

• Microsoft Azure — cloud infrastructure and data hosting;
• Amazon AWS — cloud infrastructure;
• Sanity CMS — content management platform;
• D6 Communicator — school communication and parent notifications;
• Shopify — e-commerce and licence purchasing;
• Google Analytics — website analytics (marketing site only);
• PostHog — product analytics;
• Crisp — in-app support chat;
• Sentry — application error monitoring;
• Twilio — SMS delivery;
• Resend — transactional email delivery.

We only disclose personal information without consent where necessary to prevent safety threats, for law enforcement, or as required by law.

5.1 Your rights

You have certain rights in respect of your personal information. In particular, you may:

• access the personal information we hold about you and receive copies in electronic format;
• correct, update or request deletion of your personal information where appropriate;
• object to or restrict our processing of your personal information, including for direct marketing purposes;
• request data portability to transfer your information to another service provider;
• withdraw consent at any time where processing is based on consent;
• not be subject to automated decision-making without human review for significant decisions;
• be notified if your personal information has been accessed or acquired by an unauthorised person;
• lodge a complaint with the Information Regulator if you believe your rights have been violated.

To exercise any of these rights, email privacy@yenzacareers.com. We will respond within 30 days.

5.2 Enforcing your rights

These rights are not absolute. We may refuse requests for reasons permitted under applicable data protection laws or the Promotion of Access to Information Act, 2000.

To enforce these rights, email us at privacy@yenzacareers.com. You may also lodge a complaint with the South African Information Regulator.

6. Data retention

We retain personal information for different periods based on the type of data and purpose:

• account and profile data — 90 days;
• educational records — 5 years;
• assessment results — 3 years;
• transaction records — 7 years (tax requirement);
• marketing data — 2 years after opt-out;
• analytics / cookies — 90 days;
• support queries — 2 years after resolution.

We may retain certain information longer where required by law, to defend legal claims, or for other legitimate business purposes. Anonymous and aggregate information that cannot identify you may be stored indefinitely for statistical analysis.

Upon expiry of the retention period, we will either permanently delete your personal information or de-identify it through irreversible anonymisation.

7.1 Technical and organisational security measures

We use reasonable security measures to prevent loss, misuse or unauthorised alteration of your information. However, we cannot guarantee absolute security, so you transmit information at your own risk.

We implement appropriate technical and organisational measures to protect personal information from accidental or unlawful destruction, loss, alteration, and unauthorised disclosure or access. We regularly review and improve our security processes. We destroy or de-identify personal information when no longer required for business purposes or as required by law.

7.2 Breach notifications

Where we reasonably believe personal information has been breached, we will notify you as soon as reasonably possible after discovery, unless law enforcement or the Information Regulator determines notification would impede a criminal investigation. We will notify the Information Regulator within 72 hours of becoming aware of the breach and affected data subjects without undue delay.

You acknowledge that despite our security measures, no organisation can fully protect against online security risks.

7.3 Transborder flow of personal information

We may transfer personal information outside South Africa to our operators to deliver our Services. By accepting this Policy, you consent to cross-border transfers.

If you are a minor using our Services, you warrant (promise) that your competent person has consented for us to transfer your personal information outside of the Republic of South Africa.

When transferring personal information outside South Africa, we ensure it's stored in countries with adequate privacy protections and that our operators are subject to appropriate confidentiality and security obligations.

Our operators process data in the following locations:

• Microsoft Azure — Europe (Ireland), USA;
• Amazon AWS — Europe (Frankfurt), USA;
• Sanity CMS — Europe;
• D6 Communicator — South Africa;
• Shopify — USA, Canada;
• Google Analytics — USA;
• PostHog — Europe, USA;
• Crisp — Netherlands, Germany;
• Sentry — USA;
• Twilio — USA;
• Resend — USA.

8. Links to third-party websites

When using our Services or newsletters, you may encounter links to third-party websites. These sites are not under our control and we cannot accept responsibility for their conduct or privacy practices.

We encourage you to examine third-party terms and privacy practices before disclosing personal information. We are not responsible for any loss or damage caused by third-party collection, use or retention of personal information.

9. Cookie policy

How we use cookies. Cookies enhance your experience on our digital platforms by improving functionality and enabling us to provide better services. For cookies that are not essential to the operation of our website or applications, we will request your consent before use or storage.

Our cookie purposes. We use cookies exclusively to:

• deliver the services and features you request on our platform;
• personalise educational content and learning recommendations;
• analyse platform performance and user engagement to improve our services;
• ensure our platform remains relevant to your career development needs.

Essential cookies. These cookies are required for our platform to function properly. They enable core features such as secure login, account access, and navigation through our services. These cannot be disabled as they are necessary for the platform to work.

Analytics cookies. With your consent, we use these cookies to understand how you interact with our platform. This anonymous, statistical data helps us identify areas for improvement and optimise your learning experience. No personally identifiable information is collected through these cookies.

Personalisation cookies. Subject to your consent, these cookies help us tailor content, course recommendations, and career resources based on your interests and learning progress. They enhance the relevance of your experience on our platform.

Session cookies. These temporary cookies exist only during your active session on our platform. They remember your selections and progress while you navigate our services but are automatically deleted when you close your browser or leave our platform.

Persistent cookies. With your consent, these cookies remain on your device for a predetermined period or until you manually delete them. They remember your preferences, login details (if you choose), and learning progress across sessions to provide a seamless experience when you return.

First-party cookies. These are cookies we create and manage directly to support your use of Yenza's services and track your learning journey within our platform.

Third-party cookies. Where we partner with external service providers (such as video content platforms, assessment tools, or analytics services), their cookies may be placed on your device. We only work with partners who have signed data protection agreements, and these cookies are only used for specified educational and platform improvement purposes. You can manage your consent for these cookies separately.

Managing your cookie preferences. You can adjust your cookie preferences at any time through your account settings or by contacting us at privacy@yenzacareers.com. Note that disabling certain cookies may limit functionality and affect your learning experience on our platform.

10. Contact us

We have appointed Farrel Strul (Chief Financial Officer) as our Information Officer.

Contact details: privacy@yenzacareers.com — 237 Beach Rd, Sea Point, Cape Town, 8005

For questions about this Privacy Policy, how we handle personal information, or to exercise your rights, contact our Information Officer at the above email.