1. Who is collecting your data?
Sol Plaatje University (“SPU”, “we”, “us”), located at Private Bag X5008, Kimberley, Northern Cape, 8300, South Africa, is the responsible party for the personal information collected through the Talent Pipeline Management Platform (“TPP”).
2. What personal information do we collect?
- Full name and email address (from your Google or Microsoft account)
- Academic performance data (subject marks, topic-level scores)
- Report card documents (PDF and image uploads)
- Attendance records for tutoring sessions
- Intervention and pastoral care notes (coordinators only)
- Communication records between users within the platform
3. Why do we collect this information?
We process your personal information to:
- Track learner academic performance at subject and topic level
- Identify at-risk students and coordinate support
- Generate reports for institutional quality assurance
- Comply with regulatory and accreditation requirements
4. Who can see my data?
- Students: can view their own performance data only
- Coordinators: can view data for students assigned to them
5. How long do we keep your data?
Academic records are retained for a minimum of five (5) years after your last interaction with SPU, as required by the Higher Education Act. You may request deletion of non-academic personal data at any time.
6. Your POPIA rights
Under the Protection of Personal Information Act 4 of 2013 (POPIA), you have the right to:
- Be notified when your personal information is collected
- Access your personal information held by SPU
- Request correction of inaccurate information
- Object to the processing of your information
- Lodge a complaint with the Information Regulator of South Africa
7. How to contact us or withdraw consent
To exercise any of the above rights, or to withdraw your consent, please contact the SPU Information Officer at noreply@spu.ac.za. Note that withdrawing consent may limit or terminate your access to the TPP platform.
8. Security of your information
All personal information is stored securely in encrypted databases hosted on infrastructure compliant with industry security standards. Access is controlled by role-based permissions and all changes are logged for audit purposes.