POPIA Compliance

OVCC is fully committed to protecting the personal information of all learners, tutors, parents, and website users in compliance with the Protection of Personal Information Act (POPIA), Act No. 4 of 2013.

We apply POPIA principles of accountability, processing limitation, purpose specification, security safeguards, openness, and data subject participation across the OVCC platform and related services.

• Identity and contact information such as full name, email address, phone number, city, and country.
• Learner information including course enrolment, lesson progress, assessment records, session activity, and feedback.
• Parent or guardian contact details where the learner is a minor.
• Tutor onboarding data including qualifications, experience, subjects, grades taught, professional biography, references, and uploaded supporting documents such as ID documents, certificates, and portfolio files.
• Authentication and technical data such as secure login credentials, session tokens, IP address, device information, and platform activity logs.
• Communications submitted through contact forms, newsletter subscriptions, support requests, or bug reports.

• To create and manage secure learner, tutor, parent, and administrator accounts.
• To verify tutor applications and supporting documentation during onboarding.
• To provide educational services, schedule sessions, and track learner progress.
• To communicate account, service, support, and operational updates.
• To improve platform performance, security, and user experience.
• To comply with legal, regulatory, safeguarding, and audit requirements applicable to OVCC.

• Data is protected in transit using HTTPS/TLS and stored on secured infrastructure with access controls.
• Access to personal information is restricted to authorised personnel and systems with a legitimate operational need.
• OVCC uses secure authentication, session management, and platform-level access controls to reduce unauthorised access risk.
• Uploaded tutor onboarding documents are stored in protected systems and accessed only for review, compliance, or support purposes.
• We regularly review configurations, permissions, and security practices to maintain appropriate safeguards.

OVCC uses trusted service providers to operate the platform, including Firebase services for authentication, database, and storage functionality, and ZeptoMail for certain email communications.

Where personal information is processed by an operator on OVCC's behalf, we require that processing to occur under appropriate contractual, confidentiality, and security safeguards.

• Right to access personal information held about you by OVCC.
• Right to request correction of inaccurate, incomplete, or outdated personal information.
• Right to request deletion of personal information where retention is no longer necessary, subject to legal obligations.
• Right to object to certain forms of processing or withdraw consent where consent is the basis for processing.
• Right to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed.

OVCC retains personal information only for as long as necessary for the purpose for which it was collected, including platform operations, tutor onboarding, compliance, dispute resolution, and lawful record retention.

We may update this POPIA statement from time to time to reflect changes in our services, legal obligations, or internal controls. The latest version will always be published on this page.

If you have any concerns, questions, or requests regarding your personal data or OVCC's POPIA compliance, please contact us:

Email: info@ovccapp.com
Phone: +27 73 199 1032