top of page

Palucraft privacy policy

Date last revised: 4 November 2025

Revision: 02

​

1. Who we are

​

This Privacy Policy explains how Palucraft (Pty) Ltd (“Palucraft”, “we”, “us”, “our”) collects, uses, discloses, and protects personal information when you use palucraft-gccstudy.com and its sub-domains and social media pages (the “Website”), and when you purchase or access our online study materials, books, and related services (the “Product”).

​

We are the responsible party (data controller) under South Africa’s Protection of Personal Information Act, 2013 (POPIA).

​

Contact: info@palucraft.com

​

2. Information we collect

 

a) Information you provide

  • Identification & contact details: name, email, phone (optional), company (optional).

  • Account information: username, password (hashed), profile data.

  • Transaction details: order history, payment confirmation, delivery address.

  • Communications: emails, messages, support requests, survey responses, testimonials (if submitted with consent).

 

b) Information we collect automatically

  • Device & usage data: IP address, browser type, OS, pages visited, time spent, referring URLs, general location (city/region).

  • Cookies: session and analytics cookies for login, preferences, and website analytics.

 

c) Information from third parties

We may receive limited personal information from our service providers such as payment gateways, couriers, and analytics tools for transaction confirmation, fraud prevention, and aggregated insights.

​

3. Why we process your information

 

We process personal information to:

  • Provide and operate the Website and Product (register accounts, verify payments, grant access).

  • Deliver physical books and manage couriers.

  • Support customers and respond to queries.

  • Send purchase confirmations, invoices, and service updates.

  • Improve our Website and offerings through analytics.

  • Comply with tax, accounting, and legal obligations.

  • Send marketing communications (only with consent or where permitted).

 

Legal bases: consent, contractual necessity, legal obligation, or our legitimate interests in operating a secure, efficient service.

​

4. Cookies & tracking

 

We use cookies to operate our Website, improve usability, and understand performance.

  • Necessary cookies: required for login, security, and checkout.

  • Preference cookies: remember settings such as currency or device type.

  • Analytics cookies: help us improve content and design.

  • Marketing cookies: used only if consented to.

 

You can block or delete cookies in your browser. Some features may stop working if you do so.

 

5. Payment processing (PayFast, Paystack, Yoco)

 

We use trusted third-party payment gateways for secure online payments:

 

These providers handle your card details directly through encrypted payment pages. Palucraft never stores or processes full card or banking information on our servers. Each processor complies with PCI-DSS security standards and POPIA.

 

We receive only limited payment confirmation data (e.g., transaction ID, payment status, date/time, and payer email).

 

6. Sharing your information

 

We do not sell or rent personal data. We share information only with:

  • Service providers / Operators (under strict contracts):

    • Website hosting & cloud infrastructure

    • Payment gateways (PayFast, Paystack, Yoco)

    • Email & SMS delivery services

    • Couriers for book delivery

    • Data analytics & security monitoring tools

  • Legal and professional advisers when required.

  • Regulators or law enforcement when legally obligated.

 

All operators are bound by confidentiality and must apply security measures equivalent to POPIA standards.

 

7. Cross-border data transfers

 

Some processors (e.g., Paystack, cloud hosting, analytics) may operate outside South Africa.
When data leaves the country, we ensure recipients are subject to substantially similar data-protection laws or contractually bound to provide adequate safeguards.

 

8. Retention

​

We keep personal information only as long as necessary for legitimate business or legal purposes:

  • Transaction & tax records: 5 years from payment date.

  • Candidate platform accounts: for the active license period + support/audit period.

  • Marketing lists: until you unsubscribe or request deletion.
    After these periods, we delete or anonymise data securely.

 

9. Security

 

We use encryption (TLS/HTTPS), secure password hashing, limited access permissions, firewalls, monitoring, and regular backups to protect personal information.
No system is completely secure, but if we suspect a breach, we’ll notify you and the Information Regulator as required by law.

 

10. Your rights under POPIA

​

You have the right to:

  • Access your personal information.

  • Request correction or deletion of inaccurate data.

  • Object to processing for direct marketing or legitimate interests.

  • Withdraw consent (where processing is based on consent).

  • Complain to the Information Regulator if you believe your rights have been infringed.

 

To exercise these rights, email support@palucraft.co.za.
We may verify your identity before actioning requests.

​

11. Children

​

Our services are intended for adults (18+). We do not knowingly collect personal information from minors. If we learn we’ve collected such data, we’ll delete it.

​

12. Marketing communications

 

Transactional emails (e.g., order confirmations, license activations) are necessary.
Marketing emails are sent only if you opt in or as permitted for existing customers about similar products.
 

You can unsubscribe at any time using the link in emails or by emailing support@palucraft.co.za.

 

13. Third-party links

​

Our Website may contain links to other sites. Palucraft is not responsible for the privacy practices or content of external websites. Please review their policies before sharing personal information.

 

14. Changes to this Policy

 

We may update this Privacy Policy periodically.
 

When we do, we’ll update the “Last updated” date above and, where material, post a notice on the Website.


Continued use after updates constitutes acceptance of the revised Policy.

 

15. Contact & complaints

 

Privacy enquiries or data requests:
📧 info@palucraft.com

 

General enquiries:
📧 info@palucraft.com

 

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
📞 Tel: +27 (0)10 023 5200
📧 complaints.IR@justice.gov.za | inforeg@justice.gov.za
🌐 https://www.justice.gov.za/inforeg/

​

bottom of page