Privacy Policy Outline (POPIA-Compliant)This is a structured outline with key sections and recommended content. You can expand it into full prose. It complies with South Africa’s Protection of Personal Information Act (POPIA) principles: accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, data subject participation, and consent where required.Goodie Tutors Privacy Policy Last Updated: April 20261. Introduction
Brief welcome and explanation of our commitment to protecting personal information in line with POPIA.
We are a marketplace connecting students/parents with independent tutors.
This Policy explains what personal information we collect, why, how we use it, and your rights.
2. Information We Collect
From Students/Parents: Name, contact details, age/grade, subjects needed, learning goals, payment information, session notes, and any special needs or medical information (with consent).
From Tutors: Name, ID/passport, qualifications, CV, contact details, banking information, police clearance (where applicable), teaching history, and profile content.
Sensitive Information: We only process special personal information (e.g., health data for special needs) with explicit consent or where legally required.
3. How We Collect Information
Directly when you register, book sessions, or communicate.
From third parties (e.g., background checks, payment processors).
Automatically via cookies, pixels, and analytics tools.
4. Purpose of Processing
To provide and improve the Platform (matching, booking, payments, support).
To communicate with you (updates, session reminders, marketing with consent).
To vet Tutors and ensure safeguarding.
For analytics, fraud prevention, and legal compliance.
We process information only for specified, legitimate purposes.
5. Sharing of Personal Information
With Tutors/Students/Parents as necessary for sessions (limited to what is required).
With service providers (payment processors, hosting, email services) under strict agreements.
Where required by law (e.g., court orders, regulators).
We do not sell personal information.
6. Security of Personal Information
We implement reasonable technical and organisational measures (encryption, access controls, secure servers) to protect data.
In case of a security breach, we will notify affected data subjects and the Information Regulator as required by POPIA.
7. Retention of Information
We keep personal information only as long as necessary for the original purpose or as required by law.
Once no longer needed, it is securely deleted or anonymised.
8. Your Rights (Data Subject Rights)
Right to access, correct, or delete your information.
Right to object to processing or withdraw consent (where consent is the basis).
Right to lodge a complaint with the Information Regulator.
How to exercise rights: Contact us at [email] with proof of identity.
9. Cookies and Tracking Technologies
Explanation of essential vs. non-essential cookies.
Option to manage preferences via cookie banner.
Link to detailed cookie policy if separate.
10. International Transfers
If data is transferred outside South Africa, we ensure adequate protection (e.g., binding agreements).
11. Children’s Privacy
Special care for minors: parental/guardian consent required for users under 18.
12. Changes to This Policy
We may update the Policy and will notify you of material changes via email or Platform notice.
13. Contact Us
Information Officer / Responsible Person: [Name / Email / Address]
Queries or complaints: [Dedicated email]
Consent Statement (for signup/registration): "I have read and agree to the Privacy Policy. I consent to the processing of my personal information as described.”
The website uses cookies to provide the best user experience while browsing safely. You can read more about cookies in the Privacy Policy. Cookies Policy