Privacy Policy

1. Who is responsible for your information?

The responsible party is Fisha Renaissance, registration number 2021/797513/08, at 17 Third Avenue, The Hill, Johannesburg, 2197.

Privacy and personal-information enquiries may be sent to the Information Officer at info@fisha.africa or made by telephone on +27 10 825 6997.

2. Information we may collect

Depending on how you interact with us, we may process:

• identity and contact details, including your name, identification information, email address, telephone number and address;
• organisation, employment, education, qualification, skills and work-experience information;
• application, enrolment, attendance, assessment, workplace-learning, progress and certification records;
• funding, invoicing and payment-administration information where relevant;
• communications, enquiries, feedback and support records;
• photographs, video or audio captured with an appropriate justification and, where required, consent; and
• technical information such as IP address, device and browser information, sign-in records, cookies and platform activity.

Where necessary for an approved programme or legal obligation, we may process special personal information or information relating to children only with the safeguards and authority required by law.

3. How we collect information

We collect information directly from you when you contact us, submit a form, create or use an account, apply for or join a programme, provide documents, or communicate with our team. We may also receive relevant information from employers, host employers, funders, SETAs, education institutions, assessors, service providers, referees or public sources where this is lawful and appropriate.

4. Why we use personal information

We use personal information to:

• respond to enquiries and communicate about our programmes, services and partnerships;
• assess eligibility, administer applications and enrolments, and deliver learning and workplace-development activities;
• record attendance, progress, assessments, evidence, placements and outcomes;
• meet funder, SETA, accreditation, quality-assurance, contractual, financial and legal requirements;
• operate, secure, support and improve our website and learning platform;
• manage suppliers, clients, partners, employees and contractors; and
• protect our rights, users, systems and operations and prevent misuse or fraud.

5. Lawful grounds

We process information where you have consented; where processing is necessary to conclude or perform a contract; where law requires or permits it; where it protects a legitimate interest of you, Fisha Renaissance or a third party; or where it is necessary for the proper performance of a public-law duty by a relevant body.

Providing some information is voluntary, but information marked as required may be necessary to respond to an enquiry, assess an application, create an account, meet programme requirements or perform a contract. If it is not provided, we may be unable to provide the relevant service or participation opportunity.

6. When we share information

We may share only the information reasonably required with authorised employees and contractors; funders and SETAs; clients, employers and host employers; education, assessment, quality-assurance and accreditation bodies; professional advisers; payment, email, hosting, learning-platform and IT service providers acting as operators; and regulators, law-enforcement bodies or courts where required or permitted by law.

We do not sell personal information.

7. Information outside South Africa

If a service provider stores or accesses personal information outside South Africa, we take reasonable steps to ensure that the transfer complies with section 72 of POPIA, including by relying on an adequate legal framework, appropriate contractual safeguards, binding corporate rules, consent, or another lawful basis.

8. Retention and security

We retain information only for as long as it is needed for the purpose for which it was collected, or as required by law, accreditation, funder, contractual, audit or dispute-resolution requirements. We then securely delete, destroy or de-identify it where reasonably practicable.

We use reasonable organisational and technical safeguards to protect information. No internet service is completely secure, but we investigate suspected compromises and notify affected parties and the Information Regulator when POPIA requires it.

9. Cookies and platform data

Our website and Moodle learning platform may use cookies that are necessary for sign-in, security, preferences and core functionality. Optional analytics or similar technologies should be used only where configured and permitted. You can manage cookies in your browser, although disabling necessary cookies may prevent parts of the platform from working correctly.

10. Your rights

Subject to applicable law, you may ask whether we hold your personal information; request access to it; request correction, deletion or destruction of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information; object to certain processing; withdraw consent where consent is the basis; or complain about our processing.

Send a request to info@fisha.africa. We may need to verify your identity and may retain information that law requires us to keep. More detail is available in our POPIA Notice.

11. Changes to this policy

We may update this policy when our practices or legal obligations change. The current version and update date will be published on this page.