1. Who we are
Khumalo Maths Academy is a trading name operated by Nkosinathi Thimothy Khumalo as an individual/sole proprietor in Pretoria, Gauteng, South Africa. For purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), we are the responsible party for personal information that we determine how and why to process.
2. Information we may collect
- Identity and contact information, such as learner and parent or guardian names, email addresses and telephone numbers.
- Learning information, such as grade, subjects, learning needs, attendance, submitted work and tutor communications.
- Transaction information, such as order references, products purchased, amounts, payment status and refund records.
- Technical and usage information, such as IP address, device/browser details, website activity and cookie data where available.
- Messages and support records sent through email, forms or WhatsApp.
Payments are processed by payment-service providers such as Paystack. We do not intend to store complete card numbers, card security codes or online-banking credentials.
3. Why we process information
- to provide, schedule and support lessons and digital products;
- to process payments, deliver orders and handle cancellations, refunds and disputes;
- to communicate with learners, parents or guardians and respond to enquiries;
- to maintain records, prevent fraud, protect our rights and meet legal obligations;
- to improve our website, educational services and customer experience; and
- to send marketing communications where lawful, with an option to opt out.
4. Lawful processing
We process personal information when it is necessary to perform a contract, comply with law, pursue a legitimate interest that does not unjustifiably override your rights, protect a legitimate interest, or when valid consent has been given. Where consent is the basis, it may be withdrawn, subject to lawful limits.
How we protect and share information
5. Children and learners under 18
Our services may involve children. A parent or competent guardian should make bookings, payments and material privacy decisions for a learner under 18. We aim to collect only the information reasonably needed to provide the educational service. Lessons will not be recorded for reuse or publication without appropriate prior notice and consent.
6. Sharing information
We may share information only as reasonably necessary with:
- payment processors, website hosting, cloud storage, email and communications providers;
- service providers who support delivery, security, accounting or professional advice;
- a parent or guardian responsible for a minor learner;
- regulators, courts, law-enforcement bodies or other authorities where lawfully required; and
- a successor or purchaser if the business is restructured, subject to appropriate safeguards.
Some providers may process data outside South Africa. Where this occurs, we will use reasonable measures intended to ensure lawful cross-border processing and appropriate protection.
7. Retention and security
We retain information only for as long as reasonably needed for the purposes described, to resolve disputes and to meet legal, tax, accounting or safeguarding obligations. We use reasonable technical and organisational measures to protect information against loss, misuse, unauthorised access, alteration or disclosure. No internet service is completely secure, and we cannot guarantee absolute security.
8. Your rights
Subject to POPIA and other applicable law, you may ask whether we hold your personal information; request access, correction or deletion; object to certain processing; withdraw consent where consent is relied upon; or complain about our handling of your information. We may verify your identity and may retain information where law requires or permits it.
9. Cookies and third-party platforms
The website may use essential cookies and limited analytics or embedded services. Third-party platforms, including payment and messaging services, process information under their own privacy notices. Review those notices before using the relevant service.
10. Complaints and regulator
Please contact us first so that we can try to resolve a privacy concern. You may also lodge a complaint with the Information Regulator (South Africa). Current regulator contact details and complaint channels are available at inforegulator.org.za.
11. Changes
We may update this policy when our services, providers or legal obligations change. The effective and last-updated dates at the top of the page identify the current version.
Contact us
Questions, complaints and requests may be sent to:
- Email: khumalo.nathi83@gmail.com
- WhatsApp: +27 73 084 1841
- Location: Pretoria, Gauteng, South Africa