Preparing your experience...
A plain-language overview of what data OVCC collects, how it is protected, how long it is kept, and your rights under POPIA.
OVCC operates in full compliance with the Protection of Personal Information Act (POPIA) of South Africa. Read our full POPIA policy
Account information: your name, email address, and password (stored as a secure hash).
Profile data: grade, subjects, academic history, and progress records you enter or that are generated by your use of the platform.
Usage data: pages visited, features used, time spent, and device/browser information collected to improve the platform.
Payment data: billing address and card details (card numbers are handled by our payment processor and never stored on OVCC servers).
Communications: messages sent to tutors, support tickets, and contact form submissions.
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption.
Access to personal data is restricted to authorised OVCC staff who need it to perform their role.
We use trusted third-party infrastructure providers (cloud hosting, payment processing) that are contractually bound to protect your data.
Regular security audits and vulnerability assessments are conducted to maintain data safety.
Active accounts: data is kept for as long as your account is open.
Deleted accounts: personal data is removed within 30 days of account deletion, unless we are required by law to retain it longer.
Anonymised, aggregated data (e.g., usage statistics) may be retained indefinitely as it cannot identify you.
Support communications may be retained for up to 2 years for quality assurance purposes.
Right to access: you can request a copy of the personal data OVCC holds about you.
Right to correction: you can request that inaccurate or incomplete data be corrected.
Right to deletion: you can request that your personal data be deleted, subject to legal obligations.
Right to object: you can object to certain types of processing, including direct marketing.
To exercise any of these rights, submit a request via the Contact page or email privacy@ovcc.africa.
Submit a data access, correction, or deletion request. We respond within 30 days in line with POPIA requirements.
