Privacy Policy.

This Privacy Policy applies to all personal information processed by WCC Assessments (Pty) Ltd ("WCC", "we", "us" or "our") in connection with our website at wccassessment.co.za, our training programmes, application processes, student enrolment and any other services we provide.

By accessing our website, submitting an application or engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.

We may update this policy from time to time. The most current version will always be available on our website. We encourage you to review it periodically.

WCC Assessments (Pty) Ltd is an accredited training provider registered in the Republic of South Africa. We offer occupational qualifications and skills programmes across Solar & Renewable Energy, Electrical, Education Training & Development (ETD), and Information & Communications Technology (ICT).

We collect personal information only for legitimate, specific and lawful purposes. The types of information we may collect include:

• Full name, date of birth and South African ID number or passport number
• Gender, nationality and home language
• Photographs or identity documents where required for enrolment

• Email address, telephone and mobile number
• Physical and postal address
• WhatsApp contact details

• Previous qualifications, certificates and academic records
• Employment history and workplace details where relevant
• SAQA and learner verification information

• Banking details for payment processing and NSFAS or bursary applications
• Proof of income or financial support documentation where required

• IP address, browser type, device type and operating system
• Pages visited, time spent on site and referring URLs
• Cookie data and session information (see Section 9)

We process your personal information for the following purposes:

In terms of POPIA, we process your personal information on one or more of the following lawful grounds:

• Consent — where you have given us clear, specific and informed consent to process your information for a particular purpose
• Contractual necessity — where processing is necessary to enter into or perform a contract with you, such as your enrolment agreement
• Legal obligation — where we are required to process your information to comply with a legal obligation, including SETA reporting requirements
• Legitimate interest — where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms
• Vital interest — in rare cases, where processing is necessary to protect your vital interests or those of another person

We do not sell, rent or trade your personal information. We may share it only in the following circumstances and only to the extent necessary:

• Accreditation bodies — EWSETA, ETDP SETA, MICT SETA, SAQA and QCTO as required for learner registration and certification
• Assessment and quality assurance bodies — AQPs, external moderators and verifiers
• CompTIA and Pearson VUE — for ICT certification exam registration and results reporting
• Government and regulatory authorities — DHET, the Department of Labour and other public bodies where legally required
• Service providers — IT infrastructure, CRM systems (including GoHighLevel), email platforms and payment processors, who are bound by confidentiality obligations
• Legal advisors and auditors — where required for legal, compliance or audit purposes

We retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.

• Learner records — retained for a minimum of 5 years after programme completion, as required by SETA and SAQA regulations
• Financial records — retained for 7 years in accordance with the Companies Act and SARS requirements
• Application records (unsuccessful) — retained for 12 months and then securely deleted
• Marketing communications — until you withdraw consent or unsubscribe
• Website usage data — retained for up to 24 months

Once the retention period expires, your personal information is securely deleted or anonymised.

As a data subject under POPIA, you have the following rights regarding your personal information:

To exercise any of these rights, please contact our Information Officer at [email protected]. We will respond within 30 days of receiving your request. You also have the right to lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic and support our marketing efforts. Cookies are small text files placed on your device when you visit our site.

• Essential cookies — necessary for the website to function correctly; cannot be disabled
• Analytics cookies — help us understand how visitors interact with our site (e.g. Google Analytics)
• Marketing cookies — used to track visitors across websites for targeted advertising purposes (e.g. Facebook Pixel, Google Ads)
• Functional cookies — remember your preferences and personalise your experience

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies as described above.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, loss, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption for all data transmitted through our website
• Password-protected systems with role-based access controls
• Secure cloud storage and data processing platforms
• Regular security assessments and staff training on data protection
• Incident response procedures in the event of a data breach

In the event of a security breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Regulator as required by POPIA within the prescribed timeframes.

Our website may contain links to third-party websites, social media platforms and external services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read the privacy policies of any external sites you visit.

We use the following third-party platforms in the operation of our business, each of which has its own privacy policy:

• GoHighLevel (GHL) — CRM, marketing automation and funnel management
• Google Analytics & Google Ads — website analytics and advertising
• Meta (Facebook/Instagram) — social media marketing and advertising
• WhatsApp Business — learner communication and support
• Pearson VUE — CompTIA examination registration and delivery
• PayFast / payment processors — secure payment processing

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from minors without the written consent of a parent or legal guardian. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.

Where a learner under the age of 18 enrols in one of our programmes, we require parental or guardian consent as part of the application process and will process the minor's information only as necessary to provide the agreed training services.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or business operations. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify registered learners and applicants via email where the changes are significant
• Post a prominent notice on our website for a reasonable period

Your continued use of our website or services after any changes take effect constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal information, please contact our Information Officer:

You may also lodge a complaint with the Information Regulator of South Africa: