Privacy Policy
Kura Digital Foundation NPC ("Kura", "we", "us" or "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and the rights you have over it, in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Information We Collect
Depending on how you interact with us, we may collect:
- Business Directory information: business name, contact details, business registration and B-BBEE details, service descriptions, and location, submitted when you list or claim a business.
- School and Academy information: school name, contact person details, and grade-level enrolment numbers submitted when registering for our workshop programme.
- Corporate partner information: company name, contact person details, and partnership preferences submitted through our Funders page or contact form.
- Newsletter and contact form information: name, email address, phone number, and the content of any message you send us.
- Website usage information: basic analytics data such as pages visited and browser type, collected through cookies.
2. Learner Information
Where our Academy programme involves learners under the age of 18, any personal information relating to those learners is collected through the participating school, with appropriate parental or guardian consent obtained by the school in line with applicable requirements for the processing of children's information under POPIA. We use learner information only for purposes directly related to delivering and reporting on the workshop programme.
3. How We Use Your Information
- To operate and maintain the Kura Business Directory, including verifying listed businesses;
- To plan, deliver and report on Academy workshops;
- To communicate with businesses, schools, corporate partners and website visitors;
- To prepare impact and compliance reports for funders and corporate partners;
- To comply with our legal, regulatory and tax obligations as a registered NPC and PBO.
4. Lawful Basis for Processing
We process personal information on one or more of the following bases: your consent, the necessity of processing to perform a contract or service you have requested, compliance with a legal obligation, or our legitimate interest in operating and improving our programmes, provided this does not unreasonably infringe your privacy rights.
5. Sharing of Information
We do not sell personal information. We may share information with:
- Corporate and funding partners, generally in aggregated or verified-summary form, for procurement matching and impact reporting purposes;
- Service providers who support our operations (for example, hosting or email providers), under confidentiality obligations;
- Regulators or authorities where required by law.
6. Data Security
We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, and misuse. No system can be guaranteed completely secure, and we encourage you to contact us immediately if you suspect any unauthorised access to your information.
7. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law, after which it is securely deleted or anonymised.
8. Your Rights
Under POPIA, you have the right to:
- Request access to the personal information we hold about you;
- Request correction or deletion of inaccurate or outdated information;
- Object to the processing of your personal information in certain circumstances;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact our Information Officer at privacy@kura.org.za.
9. Cookies
Our website uses basic cookies to support core functionality and to understand how visitors use our site. You can disable cookies through your browser settings, though this may affect certain website features.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at privacy@kura.org.za.