POPI Act Policy for Blended Skills Training (Pty) Ltd t/a Learn:Blended
Company Information:
Company Name: Blended Skills Training (Pty) Ltd t/a Learn:Blended
Address: 66 Gazaniastreet, Kendridge, Bellville, 7530
Purpose of Policy:
We collect personal information from learners for the following purposes:
Learner Records: To maintain accurate records of learners’ progress, course completion, and achievements.
QCTO Registration: To facilitate the registration process with the Quality Council for Trades and Occupations (QCTO).
Communication: To maintain effective communication with learners and provide updates, resources, and relevant information.
Data Collection:
Types of Personal Information: Names, email addresses, contact numbers, course preferences, and QCTO registration information.
Data Collection Methods: Collected through registration forms on our website, user accounts on our learning management system, and paper forms.
Legal Basis: We collect, and process learners’ personal information based on the following legal grounds:
QCTO Registration: The collection of learner information is necessary to fulfill our obligations for QCTO registration.
Legitimate Business Interest: We have a legitimate interest in processing learner information to provide effective training, maintain accurate records, and communicate important updates related to the courses they are enrolled in.
Consent:
Learners provide consent through an explicit opt-in during the registration process.
Consent Withdrawal: Learners can withdraw their consent by contacting us. However, this might impact their access to certain courses and resources.
Data Storage:
Learning content is securely stored using our LMS partner’s cloud storage solution.
Learner registration data is stored on Microsoft OneDrive, known for its secure cloud storage.
Security Measures:
Learner data is stored on Amazon Web Services (AWS) and Microsoft Azure, both employing robust security measures including encryption, regular security audits, and strong authentication mechanisms.
Data Access:
Access to learner data is limited to authorized personnel with a direct need for the information. Access restrictions are enforced through role-based access controls, passwords, and two-factor authentication (2FA).
Data Sharing:
Learner or company data is not shared with third parties, except for statutory bodies with a legal right to access the information.
Data Retention:
Learner registration data is retained for a minimum period of 5 years to comply with regulatory requirements.
Learner Rights:
Learners have the following rights regarding their personal information:
Access: Request access to their personal information.
Correction: Request corrections to inaccurate or incomplete data.
Objection: Object to processing based on legitimate interests.
Portability: Request transfer of personal information to themselves or another organization.
Withdrawal of Consent: Withdraw consent for processing at any time.
Complaints: Lodge complaints with relevant supervisory authorities.
Exercising Rights:
To exercise any of the above rights, learners can contact our Data Protection Officer using the below details:
Complaints and Queries:
To exercise any of the above rights, learners or other direct stakeholders can raise concerns or make inquiries about their personal information by contacting our designated Information Officer who also acts as the Data Protection Officer:
Name: Pieter du Plessis
Email: pieter@learnblended.co.za
Policy Updates:
Updates to this policy will be posted on our website and on this link: POPI Policy – LearnBlended. Learners can find the latest version at the bottom of our website.