Draft — not yet reviewed. This notice is a placeholder. The POPIA operator/responsible-party framing in particular must be confirmed by the reviewer before any vendor learner data is processed. See §9.7 of the roadmap.
Privacy notice
How Kwalifi handles personal information under the Protection of Personal Information Act.
What we collect
For learners: your name, email address, course progress, assessment results and any certificates issued to you. We collect the minimum needed to run the course and issue a verifiable certificate.
Why we collect it
To give you access to courses you enrol on, to record your results, to issue and verify certificates, and to meet record-keeping obligations.
What appears publicly
A certificate's verification page shows the holder's name, the course, and the issue date to anyone holding the certificate number. That is the point of a verifiable certificate. Nothing else about you is public, and certificate numbers cannot be guessed or listed.
Courses delivered by accredited providers
Where a course is delivered by an accredited training provider using Kwalifi, that provider is the responsible party for your personal information and Kwalifi acts as operator on their instruction.
[Reviewer to confirm this framing, retention periods aligned to QCTO record-keeping, and the operator agreement wording.]
Your rights
You may ask what we hold about you, ask for corrections, or object to processing. Contact us at the address published on the site.