Last updated 18 October 2026 · Draft for review
Privacy policy
1. Who is responsible for your information
Zulu Class is run by [YOUR FULL NAME], a sole proprietor, trading as Zulu Class.
| Physical address | [PHYSICAL ADDRESS] |
|---|---|
| Address for legal documents | [ADDRESS FOR LEGAL SERVICE — can be the same as above] |
| Phone and WhatsApp | [PHONE NUMBER] |
| [CONTACT EMAIL] | |
| Website | zuluclass.co.za |
Our Information Officer under the Protection of Personal Information Act (POPIA) is [YOUR FULL NAME], reachable at [PRIVACY EMAIL].
2. What we collect, and why
We only collect what we need to teach your child and run the subscription. Fields marked as required are needed to provide the service; everything else is optional.
| Information | Why we need it | Required? |
|---|---|---|
| Parent's first name, surname and email | Your account, receipts, important notices | Required |
| Parent's cellphone number | Weekly WhatsApp reports and payment notices, only if you choose them | Optional |
| Password | Logging in. It is stored encrypted by our login provider; we never see it | Required |
| Each child's first name and grade | Showing the right lessons and reports | Required |
| Each child's username and password, chosen by you | So your child can log in. The password is stored encrypted by our login provider; we never see it | Required for your child to log in |
| Learning activity: lessons watched, quiz answers and scores, questions under lessons, photos of working | Teaching, marking and progress reports | Created as your child uses the site |
| Grade 11 report, matric results statement and marks | Only for the laptop prize, if you enter | Optional |
| Payment details: amount, date, status, PayFast reference | Running your subscription and keeping tax records | Required to subscribe |
| Waiting list (before you sign up): your first name, email, the grade(s) your children will be in, WhatsApp number if you choose it, and how you heard about us | Telling you when the site opens, and knowing which grades to prepare for | Optional; only if you join the list |
| Consent records: when you agreed to this policy and the terms | Proving we have your permission | Required |
| Technical data: IP address and browser type in server logs | Keeping the site secure and working | Collected automatically |
We never ask for ID numbers, home addresses, your child's surname, school name or photos of your child. Please cover any ID number on a report before you upload it.
Card details: payments are processed by PayFast. We never see or store your card or bank details.
3. Children's information
Our learners are under 18. Under POPIA we may only process a child's information with the consent of a parent or legal guardian. When you create an account you confirm that you are the parent or legal guardian and give that consent. You can see, correct or delete your child's information at any time.
4. Our legal reasons for using your information
- Consent — for your child's information, WhatsApp reports, news and offers, the waiting list, and prize entries.
- Our agreement with you — to provide the lessons you pay for.
- The law — for example keeping payment records for tax purposes.
- Legitimate interest — keeping the site safe and preventing fraud.
5. Who we share it with
We do not sell your information and we do not show adverts. We share it only with:
| Who | What for |
|---|---|
| Zulu Class teachers | See learners' first names, grades, work and questions to teach and mark |
| Supabase | Database, logins and private file storage |
| Cloudflare | Website hosting and security |
| Bunny.net | Video lesson streaming |
| Zoom, or the platform named on a live class (Google Meet, YouTube, Microsoft Teams) | Running live classes. When your child joins, the name they type and their voice or video, if they turn them on, go to that platform under its own privacy policy |
| PayFast | Processing payments |
| WhatsApp (Meta), an email service and an SMS service | Sending the reports and notices you chose |
| Google Fonts and jsDelivr | Delivering the site's fonts and code. They receive your IP address when pages load |
| Authorities | Only when the law requires it |
These service providers may only use the information to provide their service to us.
6. Information stored outside South Africa
Some of these providers store information on servers outside South Africa. We only use providers that protect personal information to a standard similar to POPIA, as section 72 of POPIA requires.
7. How we keep it safe
- All connections to the site are encrypted.
- Database rules make sure each family can only see its own information.
- Prize reports are kept in a private store that only you and our admin can open.
- Only the people who need it for their work can see learner information.
- If we ever have a data breach that affects you, we will tell you and the Information Regulator as POPIA requires.
8. How long we keep it
| Information | How long |
|---|---|
| Account and learning activity | While you subscribe, then 12 months after you cancel, then deleted |
| Payment records | 5 years, as tax law requires |
| Prize reports and marks | Deleted 6 months after the winner is announced, unless you ask us to delete them sooner |
| Waiting list details | Deleted 3 months after the site opens, or straight away if you ask. If you sign up, we use your account details instead |
| Server logs | Up to 90 days |
9. Your rights
You can ask us to show you the information we hold, correct it, delete it, or stop using it. You can withdraw your consent at any time, although we may then not be able to provide the service. Contact [PRIVACY EMAIL]; we will reply within 30 days.
If you are unhappy with how we handle your information, you may complain to the Information Regulator of South Africa: inforegulator.org.za.
10. News and offers
We only send news and offers if you ticked the box to receive them. Every message tells you how to stop them. Weekly reports and payment notices are part of the service, not marketing.
11. Changes to this policy
If we make an important change, we will tell you by email before it takes effect.