1.1. Idealweb (Pty) Ltd. herein being a company established and duly registered in accordance with the company laws of the Republic of South Africa, (hereinafter referred to collectively as the "Company").

1.2. In terms of a law known as the Protection of Personal Information 4 of 2013, (POPIA) everyone has the right to privacy, including the right to the lawful collection, retention, dissemination and use of one's Personal Information.

1.3. In order to give effect to this right, the Company is under a duty to provide any person whose personal information is processed by it, known as a data subject, with a number of details pertaining to the use of and subsequent processing of the data subject's personal information, before such information is used or processed.

1.4. In accordance with this requirement, the Company sets out below:

• The information being collected as well as the source thereof.
• The purpose for which the information is collected.
• Whether the supply of the information is voluntary or mandatory.
• The consequences of failure to provide the information.
• How the information will be used and shared.

2.1. This is the privacy policy of the Company, which is applicable to all dealings with Company, whether orally, in writing or electronically, and whether owned by, established by, used by, hosted by and/or accessed by data subjects, which data subjects include, without detracting from the generality thereof, the Company's clients, learners, employees and staff, contractors and service providers and/or other third parties who may access and make use of the Company's written records and/or electronic platforms.

2.2. This privacy policy furthermore applies to the data subjects who may make use of, or access the Company's services, written records and electronic platforms, and all the processing of personal information by the Company as a result of a data subject making use of any services of the Company, except to the extent that a separate POPIA policy has been issued in respect of a specific service or product and related processing activities.

3.1. The Company takes the privacy and protection of a data subject's personal information very seriously and will only process a data subject's personal information in accordance with POPIA and the terms of this privacy statement.

3.2. In turn where the Company provides any of its personal information to a responsible party or operator, then such person will be required as a condition of receiving such information, to process such personal information in accordance with POPIA and the terms of this privacy statement.

3.3. Accordingly, the relevant data privacy principles relating to the processing of personal information, whether that belonging to the Company or that belonging to a data subject (including, but not limited to, the collection, handling, transfer, sharing, correction, storage, archiving and deletion) will apply without exception, save where POPIA provides for such an exception, to all and any personal information provided by the Company to another or received by the Company.

4.1. By accessing or using the Company's services, website, URLs, and/or when sending or receiving emails using any of the Company email addresses, the data subject:

• Acknowledges that it has read and understood this section 18 informed consent notice and related provisions.
• Agrees to be bound by this section 18 informed consent notice and the privacy policy.
• Agrees to comply with this section 18 informed consent notice and privacy policy.
• Gives the Company consent to process and further process the required personal information in accordance with this section 18 informed consent notice.

5.1. The Company will receive personal information pertaining to a data subject when the data subject interacts with the Company, whether by physical, telephonic or otherwise electronic contact.

5.2. On contact, the Company will use and process the data subject's personal information for a variety of purposes, depending on the nature of the contact, which may include:

• Identifying and/or verifying the data subject's details.
• Providing information, products and/or services that the data subject may have requested.
• Employment application purposes.
• Managing any information pertaining to the data subject.
• General administration purposes.
• Legal or contractual purposes.
• Improving the quality of the Company products and services.
• Detecting and preventing fraud and money laundering.
• Recovering unpaid fees and/or any other amount due to the Company.
• Debt collection.
• Research, analytical and statistical purposes.
• Carrying out analysis of customer profiling.
• Identifying other products and services which might be of interest to the data subjects.
• Informing a data subject about the Company products and services.
• Making such information available to third parties, if it protects or pursues the legitimate interest of the data subject, the Company or that of such third party.

5.3. In order to perform the purposes described above, the Company may from time to time share a data subject's personal information with:

• The Company's employees, on a need-to-know basis.
• Carefully selected business partners who provide products and services which may be of benefit to a data subject, on a need-to-know basis.
• Operators such as service providers and agents who perform services on our behalf, on a need-to-know basis and in terms of an operator agreement.
• Clients such as recruitment agencies and other companies and natural persons who have a paid subscription with the company to advertise job vacancies and where you applied to a specific vacancy or where you registered on a specific company's profile on or through the Company website.

5.4. The Company does not share a data subject's personal information with any third parties who have not been described above, unless legally obliged, required for legal proceedings, necessary for the pursuance of legitimate interests, or involved in the prevention of fraud. Under all such circumstances, the Company will take reasonable measures to ensure that personal information is only provided to the recipient if such recipient undertakes to keep the information confidential and secure.

5.5. Where the Company has to transfer the data subject's personal information across the South African borders, it will ensure that the recipient agrees to be bound by POPIA under binding corporate rules or agreements that provide an adequate level of protection.

6.1. Whilst the Company will make every effort to ensure the integrity and accuracy of a data subject's personal information, this may not at all times be possible. The data subject accepts the responsibility for keeping its information up to date, and undertakes to inform the Company of any changes to its personal information.

6.2. A data subject has a right of access to any personal information which the Company may have and where applicable may ask the Company to correct any inaccuracies.

7.1. The Company makes all reasonable efforts to keep its data secure at all times, however cannot guarantee the security of any information provided. The Company cannot be held responsible for any loss or unauthorized use or interception of information transmitted in accordance with this privacy statement.

7.2. The Company website may contain links to other websites outside of the Company control. The Company is not responsible for the content, privacy or security of these other third party-controlled websites.

7.3. The Company has placed cookies on its website which makes contact with your device to help make its website better. A data subject may change these cookie settings by accessing the relevant settings.

7.4. The Company may make use of social plug-ins of social networks such as Facebook, YouTube, LinkedIn and Twitter. The Company has no influence on or control over the extent of the data retrieved by the social networks' interfaces.

7.5. All telephone calls may be recorded and/or monitored for security and quality assessment purposes.

7.6. The Company has implemented the appropriate technical and organizational security measures to protect all personal data from unauthorized access, accidental or wilful manipulation, loss or destruction.

8.1. We only collect the information you provide to us.

8.2. We may request information from you from time to time, and by you providing the information so requested, you consent to the processing thereof in terms of this privacy statement.

8.3. Should you fail or refuse to provide any information requested by us, such failure or refusal may impact the quality and extent of the service we provide.

8.4. All information is provided voluntarily by data subjects, but is mandatory for the performance of our services.