top of page

Palucraft Privacy Policy

Effective Date: 15 January 2026
Last Reviewed: 15 January 2026

Revision: 03

​

Palucraft (Pty) Ltd (“Palucraft”, “we”, “us”, “our”) is committed to protecting the privacy of personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you interact with our website, platforms, programmes, and services.

​

This Privacy Policy is intended to serve as a public-facing notice and must be read together with Palucraft’s internal Protection of Personal Information (POPIA) Policy.

​

1. RESPONSIBLE PARTY

​

Palucraft (Pty) Ltd is the responsible party for the processing of personal information as contemplated in POPIA.

​

2. PERSONAL INFORMATION WE COLLECT

 

We may collect and process the following categories of personal information, depending on the nature of your interaction with Palucraft:

  • Identifying information (such as name, surname, identity number, passport number);

  • Contact details (such as email address, telephone number, physical address);

  • Educational and professional information (such as qualifications, employment history, training records, assessment and examination results);

  • Account and platform information (such as usernames, passwords, login activity);

  • Financial information (such as payment details, transaction records);

  • Website usage information (such as IP address, browser type, cookies, analytics data);

  • Any other information voluntarily provided to us through forms, correspondence, or platforms.

 

3. PURPOSES FOR WHICH PERSONAL INFORMATION IS PROCESSED

 

Palucraft processes personal information for legitimate and lawful purposes, including but not limited to:

  • Providing education, training, assessment, certification, and related services;

  • Managing learner enrolment, examinations, results, and certification records;

  • Communicating with learners, clients, suppliers, and stakeholders;

  • Processing payments and administering accounts;

  • Operating and improving our website and digital platforms;

  • Marketing our programmes and services, subject to applicable consent requirements;

  • Complying with legal, regulatory, and contractual obligations.

 

4. LAWFUL BASIS FOR PROCESSING

 

Palucraft processes personal information in accordance with POPIA on one or more of the following lawful bases:

  • the data subject has provided consent;

  • processing is necessary to conclude or perform a contract to which the data subject is a party;

  • processing is required to comply with an obligation imposed by law;

  • processing protects a legitimate interest of the data subject;

  • processing is necessary for Palucraft’s legitimate interests, provided such interests do not override the rights and freedoms of the data subject.

 

5. VOLUNTARY OR MANDATORY PROVISION OF INFORMATION

 

The provision of personal information may be:

  • Mandatory, where required to enrol in programmes, participate in assessments, process payments, or comply with legal obligations; or

  • Voluntary, where provided for general enquiries, subscriptions, or marketing communications.

 

Failure to provide mandatory information may result in Palucraft being unable to provide the requested service.

 

6. DISCLOSURE OF PERSONAL INFORMATION

 

Palucraft may disclose personal information to authorised third parties and operators who process information on our behalf, including:

  • learning management, assessment, and examination platforms;

  • payment processing and financial service providers;

  • email, communication, and customer relationship management platforms;

  • website hosting, cloud storage, and analytics service providers;

  • regulatory or statutory bodies where required by law.

 

All third-party operators are required to implement appropriate security measures and may only process personal information in accordance with Palucraft’s instructions and applicable law.

 

7. CROSS-BORDER TRANSFERS

 

Some personal information may be processed or stored outside the Republic of South Africa through cloud-based systems and service providers.

Palucraft ensures that any cross-border transfer of personal information is subject to appropriate safeguards in accordance with POPIA, and that the recipient country or organisation provides an adequate level of protection.

 

8. SECURITY SAFEGUARDS

 

Palucraft implements appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, destruction, or unlawful processing.

These measures include, where appropriate:

  • access control and authentication measures;

  • secure systems and platforms;

  • contractual security obligations imposed on operators;

  • ongoing risk assessment and review of security controls.

 

9. RETENTION OF PERSONAL INFORMATION

 

Personal information is retained only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law, contract, or consent.

Once personal information is no longer required, it is securely destroyed, deleted, or anonymised in accordance with Palucraft’s internal retention and destruction procedures.

 

10. DATA SUBJECT RIGHTS

 

In terms of POPIA, you have the right to:

  • request confirmation of whether Palucraft holds personal information about you;

  • request access to your personal information;

  • request correction or deletion of inaccurate, irrelevant, excessive, or unlawfully processed personal information;

  • object to the processing of your personal information, including for purposes of direct marketing;

  • withdraw consent where processing is based on consent;

  • request restriction of processing where applicable;

  • lodge a complaint with the Information Regulator.

 

Requests must be submitted in writing to the Information Officer.

 

11. COOKIES AND WEBSITE ANALYTICS

 

Palucraft uses cookies and similar technologies to improve website functionality, analyse usage, and enhance user experience.

 

You may disable cookies through your browser settings; however, this may affect the functionality of certain website features.

 

12. INFORMATION OFFICER

 

Palucraft has appointed an Information Officer in terms of POPIA and the Promotion of Access to Information Act, 2 of 2000 (PAIA).

​

All requests, enquiries, or complaints relating to this Privacy Policy or the processing of personal information should be directed to: Mirriam Thusini
Email: thembi@palucraft.com

 

13. COMPLAINTS

 

If you believe that Palucraft has not complied with the provisions of POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa.

​

14. CHANGES TO THIS PRIVACY POLICY

 

Palucraft reserves the right to amend this Privacy Policy from time to time to reflect changes in law, business practices, or operational requirements.

​

The latest version of this Privacy Policy will be published on our website.

​

bottom of page