POPIA Compliance

Ingwe TVET College is committed to protecting your privacy and ensuring the security of your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

1

Introduction

Ingwe TVET College ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our college services.

We process personal information in compliance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA"), the Continuing Education and Training Act, 2006 (Act No. 16 of 2006), and other applicable South African laws.

Please read this privacy policy carefully. By accessing our website or providing your personal information to us, you acknowledge that you have read and understood this policy.
2

Definitions

"Personal Information"
means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to—information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person; information relating to the education or the medical, financial, criminal or employment history of the person; any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person; the biometric information of the person; the personal opinions, views or preferences of the person; correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; the views or opinions of another individual about the person; and the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person.
"Processing"
means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including—the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use; dissemination by means of transmission, distribution or making available in any other form; or merging, linking, as well as blocking, degradation, erasure or destruction of information.
"Data Subject"
means the person to whom the personal information relates.
"Responsible Party"
means Ingwe TVET College, which alone or in conjunction with others, determines the purpose of and means for processing personal information.
"Operator"
means a person who processes personal information for a responsible party without coming under the direct authority of that party.
"Information Officer"
means the person appointed by Ingwe TVET College as the Information Officer in terms of POPIA.
"Consent"
means any voluntary, specific and informed expression of will in terms of which permission is given for the processing of personal information.
3

Information We Collect

We may collect the following types of personal information:

3.1 Personal Identifiers

  • Full name and surname
  • South African ID number or passport number
  • Date of birth
  • Gender
  • Nationality
  • Marital status
  • Race (for statistical and equity purposes)

3.2 Contact Information

  • Physical address
  • Postal address
  • Email address
  • Telephone numbers (mobile and landline)
  • Emergency contact details

3.3 Academic Information

  • Previous academic records and qualifications
  • Current enrolment status and course details
  • Academic progress and results
  • Attendance records
  • Student number
  • Registration history

3.4 Employment and Financial Information

  • Employment history (for staff and某些 students)
  • Bank account details (for fee payments and refunds)
  • Bursary or funding information
  • Tax reference number
  • Income and financial statements (for financial aid applications)

3.5 Special Personal Information

Under POPIA, certain information is considered "special personal information" and requires additional protection:

  • Religious or philosophical beliefs (if voluntarily provided)
  • Health information (for disability support and medical emergencies)
  • Criminal history (for certain programmes and employment)
  • Biometric information (for identification purposes)

We only collect special personal information where necessary and with your explicit consent, or where permitted by law.

3.6 Technical Information

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Website usage data and cookies
  • Login times and duration
4

How We Collect Information

We collect personal information in the following ways:

4.1 Direct Collection

We collect information directly from you when you:

  • Complete application forms (online or paper-based)
  • Register as a student
  • Apply for employment
  • Contact us via email, phone, or in person
  • Submit documents or forms
  • Participate in surveys or feedback requests
  • Visit our campuses and sign in at reception

4.2 Automated Collection

We automatically collect certain information when you use our website through cookies and similar technologies, including:

  • Log files and analytics data
  • Cookie data
  • Website usage patterns
  • Student portal activity

4.3 Third-Party Sources

We may receive information about you from:

  • Department of Higher Education and Training (DHET)
  • Umalusi (Council for Quality Assurance)
  • Previous educational institutions
  • Bursary providers and funding organisations
  • Employers (for work-integrated learning)
  • Government departments
  • Credit bureaus (for financial aid verification)
6

How We Use Your Information

We use your personal information for the following purposes:

Academic Administration

  • Processing applications and registrations
  • Managing student records
  • Recording and reporting academic results
  • Issuing certificates and qualifications
  • Academic advising and support

Financial Management

  • Processing fee payments and refunds
  • Managing bursaries and financial aid
  • Invoicing and debt collection
  • Financial reporting and audits

Communication

  • Sending important notices and updates
  • Responding to inquiries and requests
  • Marketing and promotional communications (with consent)
  • Emergency notifications

Compliance and Reporting

  • Reporting to DHET, Umalusi, and other bodies
  • Statistical analysis and planning
  • Audit and quality assurance
  • Legal and regulatory compliance

Campus Operations

  • Campus access and security
  • Library services
  • Student support services
  • Health and safety management

Alumni Relations

  • Maintaining alumni records
  • Alumni communications and events
  • Fundraising and development
7

Information Sharing and Disclosure

We may share your personal information with the following categories of recipients:

Important: We do not sell your personal information to third parties. We only share information as necessary to provide our services, comply with legal obligations, or with your explicit consent.
8

Data Security

We implement appropriate technical and organisational measures to protect your personal information against:

  • Unauthorised access or processing
  • Unlawful access or processing
  • Accidental loss, destruction, or damage
  • Unauthorised modification or disclosure

Our security measures include:

Secure servers and firewalls
Encryption of sensitive data
Access controls and authentication
Staff training on data protection
Regular security audits
Incident response procedures

While we implement these security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you of any data breaches in accordance with POPIA requirements.

9

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention Periods:

Category of Information Retention Period Legal Basis
Student academic records Permanently (archived) DHET requirements, historical value
Financial records 5-7 years SARS, audit requirements
Employment records 5 years after termination Labour law requirements
Website usage data 12 months Analytics and improvement
Application records (unsuccessful) 12 months Application processing
Email correspondence 3 years Business operations

When information is no longer required, we will securely delete or anonymise it in accordance with our data destruction policies.

10

Your Rights Under POPIA

As a data subject, you have the following rights under POPIA:

Right to be Informed

You have the right to be notified that your personal information is being collected and how it will be used.

Right of Access

You have the right to request access to the personal information we hold about you.

Right to Correction

You have the right to request correction of inaccurate or incomplete personal information.

Right to Deletion

You have the right to request deletion of your personal information in certain circumstances.

Right to Object

You have the right to object to the processing of your personal information in certain circumstances.

Right to Data Portability

You have the right to receive your personal information in a structured, commonly used format.

How to Exercise Your Rights

To exercise any of these rights, please contact our Information Officer using the details provided in the Contact Information section below. We will respond to your request within a reasonable timeframe and in accordance with POPIA requirements.

Information Required for Requests:

  • Your full name and contact details
  • Your relationship to the college (student, staff, applicant, etc.)
  • Specific information about your request
  • Proof of identity (to verify your identity)
  • Any relevant reference numbers (student number, application ID, etc.)
11

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage information.

What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They help us remember your preferences and understand how you use our site.

Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Required for website functionality, security, and accessibility Session / Persistent
Preference Cookies Remember your settings and preferences 1 year
Analytics Cookies Help us understand how visitors use our website 12 months
Session Cookies Temporary cookies that expire when you close your browser Session

Managing Cookies

You can control and manage cookies in your browser settings. Please note that disabling certain cookies may affect website functionality.

13

Children's Privacy

We collect personal information from minors (individuals under 18 years) in the following circumstances:

  • Student applications and registrations
  • School partnership programmes
  • Campus visits and events

Parental Consent

Where required by law, we obtain consent from a parent or legal guardian before collecting personal information from minors. Parents/guardians have the right to:

  • Access their child's personal information
  • Request correction or deletion of information
  • Withdraw consent for processing

If you believe we may have collected information from a minor without appropriate consent, please contact us immediately.

14

International Data Transfers

In some cases, your personal information may be transferred to and processed in countries outside South Africa, for example:

  • Cloud service providers with servers in other countries
  • International educational partnerships
  • International student applications

When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as:

  • Transfer to countries with adequate data protection laws
  • Standard contractual clauses approved by the Information Regulator
  • Binding corporate rules
  • Explicit consent from data subjects
15

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes:

  • We will update the "Last Updated" date at the top of this policy
  • We will notify users of significant changes through our website or direct communication
  • Where required by law, we will obtain your consent for material changes

We encourage you to review this policy periodically to stay informed about how we protect your information.

16

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Information Officer:

Information Officer

Email: info@ingwecollege.edu.za

Phone: 039 940 2142

Physical Address

Ingwe TVET College
Central Office
Badibanie Village
KwaBhaca, Eastern Cape
5020

Postal Address

Private Bag 92491
KwaBhaca, Eastern Cape
5020

Office Hours

Monday - Friday: 08:00 - 16:30
Saturday & Sunday: Closed
Public Holidays: Closed

17

Complaints Procedure

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)

Physical Address:
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Postal Address:
P.O. Box 31533, Braamfontein, Johannesburg, 2017

Email: complaints@inforegulator.org.za

Website: www.inforegulator.org.za

Phone: 010 023 5200

Complaint Process:

  1. Internal Resolution: Contact our Information Officer first to attempt resolution
  2. Escalation: If unsatisfied with our response, you may escalate to the Information Regulator
  3. Timeframes: Complaints should be lodged within a reasonable time of the alleged violation
  4. Required Information: Provide details of the alleged violation, your contact information, and any relevant correspondence