Privacy Policy & Data Protection Notice
KASI EDUKASI (Pty) Ltd — Privacy Policy & Data Protection Notice
In terms of the Protection of Personal Information Act 4 of 2013 (POPIA)
Effective Date: 1 June 2026 | Version: 1.0
1. Who We Are
KASI EDUKASI (Pty) Ltd (“KASI”, “we”, “us”) is a registered Skills Development Provider (SDP) delivering QCTO-accredited qualifications under the auspices of the Services SETA (SSETA). We operate the KASI Learning Management System (LMS) at lms.edukasi.tech.
Our Information Officer is contactable at: info@edukasi.tech
2. What Personal Information We Collect
- Identity data: Full name, ID number, date of birth, gender, race (for SETA reporting)
- Contact data: Email address, phone number, physical address
- Academic data: Prior qualifications, academic history, entry requirement evidence
- Programme data: Enrolment records, attendance, assessment results, assignment submissions, audit logs
- Technical data: IP address, browser type, login timestamps, LMS activity logs
- Financial data: Course fee payments, bursary information (where applicable)
3. Why We Process Your Information (Lawful Basis)
| Purpose | Lawful Basis |
|---|---|
| Programme delivery and assessment | Performance of contract (enrolment agreement) |
| SETA/QCTO statutory reporting | Legal obligation (Skills Development Act 97 of 1998) |
| Certification and credentialing | Legal obligation + legitimate interest |
| Learner support and communication | Legitimate interest |
| LMS security and fraud prevention | Legitimate interest |
| Marketing (with your consent) | Consent (you may withdraw at any time) |
4. How Long We Keep Your Information
- Assessment records & certificates: Minimum 5 years (QCTO requirement)
- SETA submission data: 7 years (statutory)
- LMS activity logs: 3 years
- Marketing data: Until consent withdrawn
5. Who We Share Your Information With
- Services SETA (SSETA): Mandatory learner data for SETA reporting and certification
- SAQA: Qualification registration and verification
- External Assessors & Moderators: Assessment records only (anonymised where possible)
- Host Employers: Work experience records (WM modules) with your consent
- Hostinger (Pty) Ltd: LMS hosting infrastructure (data processor, POPIA compliant)
We do NOT sell your personal information to third parties.
6. Your Rights Under POPIA
- Access your personal information held by us
- Correct inaccurate information
- Object to processing for direct marketing
- Request deletion (subject to statutory retention requirements)
- Lodge a complaint with the Information Regulator: inforeg@justice.gov.za
Submit requests to: info@edukasi.tech (response within 30 days)
7. Data Security
- All data transmitted over HTTPS/TLS encryption
- SHA-256 integrity hashing of assessment submissions
- Immutable audit logs for all learner data access events
- Role-based access control (learners cannot access other learners data)
- Regular security reviews and backup procedures
8. Cookies
This LMS uses essential cookies for session management and security. We do not use tracking or advertising cookies without your consent.
9. Changes to This Policy
We may update this policy periodically. You will be notified of significant changes upon next login and required to re-accept.
Contact: info@edukasi.tech | KASI EDUKASI (Pty) Ltd