Statutory Privacy Compliance

Privacy Policy & POPIA Notice

Entity: Self-Pass Learning Systems (Pty) Ltd (Reg: 2026/816949/07)
Compliance Framework: Protection of Personal Information Act 4 of 2013 (POPIA) & ECTA
Effective Date: March 2026 | Last Updated: October 2026

01. Statutory Commitment & Scope

Self-Pass Learning Systems (Pty) Ltd ("Self-Pass", "Company", "we", "us", or "our") respects your privacy and is committed to protecting your personal information in strict accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act 25 of 2002 (ECTA) of South Africa.

This Privacy Policy applies to all personal data collected through our primary domain (https://selfpass.co.za), our course distribution portals, and our central registry systems operated in coordination with our global licensing umbrella, Planeta Vida (Singapore).

02. Personal Information We Collect

To provide accredited online learning distribution, issue verified credentials, and maintain secure access, we process the following categories of Personal Information:

  • Identity & Contact Information: Full name, national identity/passport number, primary email address, and physical/postal address.
  • Academic & Assessment Records: Module completion logs, time spent per unit, assessment answers, diagnostic quiz scores, and certificate issuance metadata.
  • Transaction Metadata: Order IDs, license activation keys, and purchase timestamps (Note: Payment card details are processed exclusively by Digistore24 and are never stored on Self-Pass servers).
  • Technical Infrastructure Data: IP addresses, browser types, device identifiers, and SSL routing telemetry collected automatically via Cloudflare to secure platform operations.

03. Purpose of Data Processing

Self-Pass collects and processes Personal Information strictly for legitimate educational, operational, and statutory purposes:

  1. Curriculum Access & Delivery: Authenticating user accounts and serving course content across our 5-Pillar curriculum architecture.
  2. Assessment Evaluation & Certification: Evaluating diagnostic quizzes against our mandatory 70% passing standard and generating official certificates containing verified CPD credits and Notional Hours.
  3. Central Registry Verification: Maintaining a database-hashed public registry allowing third-party employers and professional bodies to verify certificate authenticity at https://www.pv-en.com/verify-certificate.
  4. Compliance & Customer Support: Managing refund requests, resolving technical tickets, and fulfilling tax, statutory, and accounting requirements under South African law.

04. Cryptographic Certificate Hashing & Verification

Public Verification Disclosure: When a learner achieves a score of 70% or higher and receives an official Certificate of Completion, a anonymized cryptographic Hash ID linked to the learner’s verified full name, completion date, and earned CPD credits is indexed in our Central Registry. This allows employers to verify credential validity without exposing private account credentials or diagnostic quiz logs.

05. Cross-Border Data Transfers & Third-Party Processors

In operating an international digital distribution architecture, Self-Pass transfers and processes data across secure global infrastructure partners under POPIA Section 72 safeguards:

  • Planeta Vida (Singapore): Central course repository, intellectual property umbrella, and primary verification registry host.
  • Digistore24: Authorized global reseller and merchant of record handling all payment transactions and 60-day money-back guarantee processing under PCI-DSS Level 1 security.
  • Cloudflare Inc.: Global Content Delivery Network (CDN) providing web application firewall (WAF), DNS caching, and SSL encryption.

All cross-border operators are bound by contractual agreements ensuring data protection standards equivalent to or exceeding South Africa’s POPIA requirements.

06. Data Security & Retention

We enforce technical and organizational safeguards to protect Personal Information against unauthorized access, loss, or destruction. All data transmissions are encrypted using standard 256-bit SSL technology.

Personal account data is retained for the duration of your active learning license and for a period of up to 7 years following inactive status to comply with SARS tax laws and educational auditing standards. Database-hashed certification records are retained permanently to ensure lifelong credential verification for learners.

07. Data Subject Rights Under POPIA

Under South African law, you hold clear rights regarding your Personal Information processed by Self-Pass:

  • Right to Access: Request confirmation of whether we hold personal data about you and obtain a copy of your records.
  • Right to Correction: Request the correction, updating, or deletion of inaccurate, incomplete, or outdated personal information.
  • Right to Object: Object to the processing of personal information on reasonable grounds, subject to statutory retention requirements.
  • Right to Complain: Submit a complaint directly to the South African Information Regulator if you believe your data privacy rights have been infringed.

08. Information Officer & Compliance Contact

To exercise your statutory data subject rights or submit privacy-related inquiries, contact our designated Information Officer:

Self-Pass Learning Systems (Pty) Ltd
Attention: Information Officer / Privacy Operations
Registration No: 2026/816949/07
SARS Tax Reference: 9730159200
Head Office Location: KwaZulu-Natal, South Africa
Primary Domain: https://selfpass.co.za
Verification Portal: https://www.pv-en.com/verify-certificate
Compliance Email: admin@pv-en.com