Privacy Policy

Effective 2026 · CTA Thrive Coach

CTA Thrive Coach ("we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). This policy explains what we collect, why, how we use and protect it, and the rights you have over it.

1. Who we are & our Information Officer

CTA Thrive Coach is the responsible party for the personal information processed through this platform. For any privacy question or to exercise your rights, contact our Information Officer at info@ctathrivecoach.co.za, or via https://www.thrivecoach.co.za.

2. Information we collect

We collect information you give us during registration and while using the platform, including:

  • Identity & contact: name, title, ID/passport number (optional), nationality, address, e-mail, phone/WhatsApp, emergency contact.
  • Education & study: your institution, qualification, modules, study preferences, learning goals and academic calendar.
  • Funding: who pays for your studies (self, sponsor, bursary, employer).
  • Technology & accessibility: device, connection quality and any accessibility needs, so we can tailor your experience.
  • Account & usage: login records, activity, messages, submissions and progress.
  • Payments: invoices and payment status. Card details are handled by our payment gateway (PayFast) and are never stored by us.

Some fields are optional; where a field is required to operate your account we tell you so.

3. Why we process it (purpose & lawful basis)

We process your information to: create and manage your account; enrol you in courses, modules and groups; deliver learning materials, assessments and communications; process payments and issue invoices; provide support; keep the platform secure; and meet legal obligations. Our lawful bases under POPIA are your consent, the performance of our contract with you, and our legitimate interests in running the service safely.

4. Your consent choices

Some processing is optional and only happens with your consent — marketing e-mails, analytics, research use of anonymised data, AI personalisation, non-essential cookies and sharing with partner institutions. You can change these at any time under Settings → Privacy & consent, and withdraw consent without affecting the lawfulness of processing before withdrawal.

5. Cookies

We use essential cookies to run the platform (e.g. keeping you signed in) and, with your consent, analytics cookies to improve it. You can accept or decline non-essential cookies via the banner shown on your first visit, or change your choice under Settings → Privacy & consent.

6. Who we share it with

We do not sell your personal information. We share it only with operators who help us run the service (e.g. e-mail delivery, our payment gateway and, where you use them, live-class providers), each bound to protect it; with your consent, with partner institutions; and where required by law.

7. Security

We apply appropriate technical and organisational safeguards — encrypted transport, access controls, authentication and audit logging — to protect your information against loss, unauthorised access or disclosure. No system is perfectly secure, but we work to reduce risk and will notify you and the Regulator of a breach as POPIA requires.

8. How long we keep it

We keep your information for as long as your account is active and as needed for the purposes above or to meet legal/record-keeping obligations. When you close your account it is deactivated and permanently deleted after a 30-day grace period, except where we must retain certain records by law.

9. Your rights

Under POPIA you have the right to: access the information we hold about you; correct or update it; delete it or object to its processing; and withdraw consent. You can:

  • Download your data and manage consent under Settings → Privacy & consent.
  • Update your details under Settings → Account & profile.
  • Close your account under Settings → Close account.

You may also contact our Information Officer to exercise any right.

10. Cross-border processing

Some of our operators may process information outside South Africa. Where they do, we take steps to ensure it receives a level of protection consistent with POPIA.

11. Children & special information

Where a learner is a minor, registration and consent must be provided by a parent or guardian. We do not knowingly collect special personal information beyond what you choose to provide (e.g. accessibility needs) for the purposes described here.

12. Complaints

If you believe we have not handled your information properly, please contact our Information Officer first. You also have the right to lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za, e-mail POPIAComplaints@inforegulator.org.za.

13. Changes to this policy

We may update this policy from time to time. Material changes will be notified to you and the effective date above will be revised. Continued use of the platform after a change means you accept the updated policy.