Privacy Notice (POPIA)

Identity and contact details (name, ID number, email, phone), academic records (registrations, enrolments, subject results, submissions), learning activity, support conversations with the Study Assistant, and assessment integrity data where an invigilated assessment is written.

To register and enrol students, deliver teaching and assessment, verify assessment integrity, issue results and certificates, meet accreditation and statutory reporting duties, and secure the platform. Processing is based on contract, legal obligation, legitimate interest, or your consent where required.

Where an assessment is marked as invigilated, integrity signals (tab switching, fullscreen exit, pasted content, device and screen configuration) and, with your explicit consent, camera and microphone availability are recorded for the duration of the attempt. These records are used solely for academic integrity review and are visible only to authorised assessment staff.

We share personal information only with accredited bodies and regulators where required, and with vetted operators who host and secure the platform under written processing terms. We do not sell personal information.

Records are retained for the periods set out in our retention schedule — typically the statutory academic record period — after which they are deleted or de-identified.

Access is role-based and enforced at the database layer, all traffic is encrypted in transit, privileged actions are audit-logged, and access to identity fields is logged and restricted to staff with a demonstrated need.

You may request access to, correction of, or deletion of your personal information, object to processing, or request portability. Signed-in users can lodge a request from their profile; anyone else may email the Information Officer.

Registrar, Marematlou Training Institute — privacy@xullop.co.za. You also have the right to complain to the Information Regulator of South Africa.