POPI Act Policy for Blended Skills Training (Pty) Ltd t/a Learn:Blended
Company Information:
Company Name: Blended Skills Training (Pty) Ltd t/a Learn:Blended
Address: 66 Gazaniastreet, Kendridge, Bellville, 7530
Purpose of Policy:
We collect personal information from learners for the following purposes:
Learner Records: To maintain accurate records of learners’ progress, course completion, and achievements.
QCTO Registration: To facilitate the registration process with the Quality Council for Trades and Occupations (QCTO).
Communication: To maintain effective communication with learners and provide updates, resources, and relevant information.
Data Collection:
Types of Personal Information: Names, email addresses, contact numbers, course preferences, and QCTO registration information.
Data Collection Methods: Collected through registration forms on our website, user accounts on our learning management system, and paper forms.
Legal Basis: We collect, and process learners’ personal information based on the following legal grounds:
QCTO Registration: The collection of learner information is necessary to fulfill our obligations for QCTO registration.
Legitimate Business Interest: We have a legitimate interest in processing learner information to provide effective training, maintain accurate records, and communicate important updates related to the courses they are enrolled in.
Consent:
Learners provide consent through an explicit opt-in during the registration process.
Consent Withdrawal: Learners can withdraw their consent by contacting us. However, this might impact their access to certain courses and resources.
Data Storage:
Learning content is securely stored using our LMS partner’s cloud storage solution.
Learner registration data is stored on Microsoft OneDrive, known for its secure cloud storage.
Security Measures:
Learner data is stored on Amazon Web Services (AWS) and Microsoft Azure, both employing robust security measures including encryption, regular security audits, and strong authentication mechanisms.
Data Access:
Access to learner data is limited to authorized personnel with a direct need for the information. Access restrictions are enforced through role-based access controls, passwords, and two-factor authentication (2FA).
Data Sharing:
Learner or company data is not shared with third parties, except for statutory bodies with a legal right to access the information.
Data Retention:
Learner registration data is retained for a minimum period of 5 years to comply with regulatory requirements.
Learner Rights:
Learners have the following rights regarding their personal information:
Access: Request access to their personal information.
Correction: Request corrections to inaccurate or incomplete data.
Objection: Object to processing based on legitimate interests.
Portability: Request transfer of personal information to themselves or another organization.
Withdrawal of Consent: Withdraw consent for processing at any time.
Complaints: Lodge complaints with relevant supervisory authorities.
Exercising Rights:
To exercise any of the above rights, learners can contact our Data Protection Officer using the below details:
Complaints and Queries:
Learners or other direct stakeholders can raise concerns or make inquiries about their personal information by contacting our designated Information Officer:
Name: Pieter du Plessis
Email: pieter@learnblended.co.za
Policy Updates:
Updates to this policy will be posted on our website and on this link: POPI Policy – LearnBlended. Learners can find the latest version at the bottom of our website.