Privacy notice
This privacy notice explains how Santam Consumer Financial Education collects, uses, shares and protects personal information on learn.mzansi-insurance.co.za. We aim to handle information lawfully and transparently under the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African law. This notice covers the Consumer Financial Education learning hub, personalised educational WhatsApp links, and related first-party measurement.
Who we are and how to contact us
Santam Ltd acts as responsible party for this programme. The learning hub is operated to deliver free educational content for small business owners and related programme measurement.
For privacy questions, to exercise your rights, or to contact the Information Officer, please contact Santam through its published Information Officer / privacy channels. Specific contact details for this programme may be confirmed before go-live.
Who this notice applies to
- Website visitors , people who browse learning pages on this hub.
- Sign-up contacts , people who submit the signup form (name, mobile, and optional details).
- Campaign recipients , people who receive a personalised educational WhatsApp link and open it in a browser.
What information we collect
Information you give us
- On signup , full name and mobile number (required); email if you choose email updates; preferred language; province or region; business industry or type.
- Optional self-declared demographics , age group, location type (urban / township / rural), race, gender, and nationality. Race is POPIA special personal information and is collected only when you choose to answer.
- Communication preferences , whether you want educational updates on WhatsApp and/or email (separate choices you can withdraw later).
Usage and technical data
- A pseudonymous first-party browser identifier (cookie). It is not derived from your IP address, user-agent fingerprint, phone number, or email.
- Page views and navigation between learning topics; resource downloads; language selection.
- Video impressions, starts, progress milestones, completions, pauses, and player errors.
- For a short diagnostics window, server-side event diagnostics such as request hostname, a coarse referrer class, and Cloudflare bot signals , used for traffic quality, not for identifying you.
- Evidence of consent or preference choices, including wording and privacy-notice version identifiers where applicable.
What we do not collect
- Learner login accounts or passwords.
- Browser fingerprints built from IP, user-agent, or device attributes for identity.
- Health, religion, biometrics, or other special personal information , other than voluntary self-declared race for programme reporting when you choose to provide it.
Personalised WhatsApp links
- Campaign messages may include a personalised link unique to that recipient and campaign.
- The link does not contain your phone number.
- Opening the link may allow us to associate later website activity in that browser with the campaign recipient record after a confirmed page landing.
- Link previews and automated scanners are not treated as confirmed landings.
When anonymous activity becomes associated with a contact
- You arrive through a personalised recipient link and confirm a landing; or
- You later submit your phone number on the signup form.
Why we process information and our lawful basis
We process personal information only where POPIA permits it , for example legitimate interests pursued in a balanced way, consent where we ask for it, or where needed to deliver a channel you requested.
- Deliver free educational content and measure programme reach and engagement , legitimate interests in programme delivery and improvement (subject to final legal confirmation).
- Improve guides, topics, and video learning based on aggregated usage , legitimate interests.
- Send educational WhatsApp or email updates only where you have chosen that channel , consent / preference you can withdraw.
- Secure the service, reduce bot and abuse traffic, and keep measurement reliable , legitimate interests.
- Respond to privacy requests and meet legal obligations , legal obligation.
Who we share information with
We do not sell your personal information. We share it only with operators who process it on our behalf to run this hub, under arrangements that require them to protect it and use it only for specified purposes.
- Cloudflare , hosting, D1 database, Turnstile (bot checks), and Access for admin reports.
- Twilio , WhatsApp message delivery. We do not use Twilio click tracking for this programme.
- YouTube , only when a topic embeds a YouTube player (YouTube may process its own technical data under its policies).
We may also disclose information where required by law or a lawful request, to protect the programme, or in connection with a reorganisation of the responsible party’s operations where the recipient must honour equivalent protections.
Cross-border transfers
Some operators (including Cloudflare) process information on infrastructure outside South Africa. Where personal information is transferred across borders, we do so in line with section 72 of POPIA , for example under contracts that require adequate protection, where needed to provide the service, or with your consent where required.
How long we keep information
- Measurement events, browser profiles, and related programme records are kept for configurable retention periods. Final periods require Information Officer approval before destructive deletion is enabled.
- Communication preference and consent evidence may be kept for as long as needed to show what you chose and when.
- You may opt out of persistent custom tracking and withdraw WhatsApp or email preferences on the privacy preferences page. Opt-out stops future persistent tracking on that browser; it does not silently erase historical records already stored lawfully.
Your rights
Subject to the conditions in POPIA, you have the right to
- request confirmation of, and access to, personal information we hold about you;
- request correction or updating of inaccurate information;
- request deletion of information we are no longer entitled to keep;
- object to processing on reasonable grounds;
- withdraw consent or communication preferences you have given, at any time; and
- lodge a complaint with the Information Regulator (South Africa).
To exercise these rights, contact Santam’s Information Officer through Santam’s published privacy channels. You can also manage tracking opt-out and communication preferences on this site’s privacy preferences page.
How we protect information
We take reasonable technical and organisational measures to safeguard personal information, including encrypted storage of contact details such as phone and email where collected, access controls for admin reports, and measures to reduce automated abuse. No method of transmission or storage is completely secure. Where the law requires, a compromise will be notified as required.
Children
This learning hub is intended for adult small business owners and related adult learners. It is not directed at children. We do not knowingly collect personal information of children. If you believe a child has provided information, contact us and we will take appropriate steps.
Cookies and tracking
We use first-party cookies and similar browser storage. We do not use third-party advertising trackers on this hub.
Necessary
Needed for the hub to work securely , for example storing a tracking opt-out choice, and technical measures such as Turnstile bot checks. These do not require consent to keep the service usable and safe.
Programme measurement
A pseudonymous browser identifier and related first-party events help us understand how learning pages and videos are used. Depending on the configured privacy mode, measurement may run under legitimate interests with an easy opt-out, or only after you accept measurement. You can change your choice anytime on the privacy preferences page.
Privacy and tracking preferences
Changes to this notice
We may update this notice from time to time. Material changes will be reflected by updating the “last updated” date on this page. Continued use of the hub after an update means you should review the revised notice. Production wording remains subject to Information Officer / legal approval.
Complaints and the Information Regulator
If you are concerned about how we handle your personal information, please contact Santam’s Information Officer first so we can try to resolve it. You also have the right to complain to the Information Regulator (South Africa)
- General enquiries , enquiries@inforeg.org.za
- POPIA complaints , POPIAComplaints@inforeg.org.za
- Website , https://inforegulator.org.za