Privacy Policy

1. Who we are

KAYISE IT (registration number 2015/184122/07) is an Information Technology company based in South Africa, providing software and web development, IT consulting, drone training and 4IR skills training. For the purposes of POPIA, KAYISE IT is the "responsible party" that determines why and how your personal information is processed.

2. Personal information we collect

Depending on how you interact with us, we may collect the following personal information:

• Identity and contact details — name, surname, ID number (where required, e.g. training enrolment or drone registration), email address, phone number and physical address.
• Account information — login credentials and profile details when you register on our website.
• Education and career information — qualifications, CVs and related details when you apply for internships, training programmes or opportunities.
• Payment information — billing details for services purchased. Card details are processed by our payment gateway (DPO PayGate) and are not stored on our website.
• Communications — messages you send us via contact forms, email, WhatsApp or our website chatbot.
• Technical information — IP address, browser type, device information and website usage data collected through cookies and analytics tools.

3. How and why we use your information

We process personal information only for lawful purposes, including to:

• Provide and manage our services, training programmes and internships;
• Process orders, invoices and payments;
• Respond to enquiries and provide customer support;
• Register learners for accredited training and issue certificates;
• Comply with legal and regulatory obligations (e.g. tax, SACAA drone regulations, SETA requirements);
• Improve our website, services and user experience;
• Send you service updates or marketing communications, where you have consented or where otherwise permitted by POPIA. You may opt out at any time.

4. Lawful basis for processing

We rely on one or more of the following justifications under POPIA: your consent; the conclusion or performance of a contract with you; compliance with a legal obligation; or the pursuit of our legitimate interests, provided those interests do not override your rights.

5. Sharing of personal information

We do not sell your personal information. We only share it with:

• Service providers (operators) who process information on our behalf, such as hosting providers, payment processors (DPO PayGate) and analytics providers (Google Analytics), under appropriate confidentiality and security obligations;
• Training and accreditation bodies where required to register learners or issue certification;
• Regulators and authorities where disclosure is required by law.

Where personal information is transferred outside South Africa (for example, to cloud service providers), we ensure the recipient is subject to a law, binding corporate rules or an agreement providing an adequate level of protection as required by section 72 of POPIA.

6. Cookies and analytics

Our website uses cookies and similar technologies, including Google Analytics and Google reCAPTCHA, to keep the site secure, understand how visitors use it and improve our content. You can control or delete cookies through your browser settings; some site features may not function properly if cookies are disabled.

7. Security safeguards

In line with section 19 of POPIA, we take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised destruction and unlawful access. These include encrypted connections (SSL/TLS), access controls and secure payment processing. Should a data breach occur that compromises your personal information, we will notify the Information Regulator and affected data subjects as required by section 22 of POPIA.

8. Retention of information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law (for example, financial records retained for tax purposes, or training records retained for accreditation requirements). Thereafter it is securely deleted, destroyed or de-identified.

9. Your rights as a data subject

Under POPIA, you have the right to:

• Be notified when your personal information is collected or has been accessed unlawfully;
• Request access to the personal information we hold about you;
• Request correction or deletion of inaccurate, irrelevant, excessive, outdated or unlawfully obtained information;
• Object to the processing of your personal information;
• Object to direct marketing and withdraw consent at any time;
• Not be subject to a decision based solely on automated processing;
• Lodge a complaint with the Information Regulator.

To exercise any of these rights, contact our Information Officer using the details below. Requests for access to records may also be made in terms of the Promotion of Access to Information Act 2 of 2000 (PAIA).

10. Information Officer and contact details

11. The Information Regulator

If you believe we have processed your personal information unlawfully, you may lodge a complaint with the Information Regulator (South Africa):

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the date of the last update. Please also see our Terms & Conditions.