01 Introduction
Roguda Fashion & Art Design School ("we", "our", or "us") is committed to protecting your personal information and respecting your privacy rights in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and its regulations.
This policy explains how we collect, use, store, and protect your personal information, and outlines your rights as a data subject.
02 Information We Collect
We collect the following types of personal information:
- Contact Information: Full name, email address, phone number, physical address
- Identification Information: ID / Passport number
- Educational Information: Educational background, qualifications, portfolio
- Application Data: Program preferences, motivation statements
- Account Information: Login credentials, student dashboard data
- Technical Data: IP address, browser type, device information (for security purposes only)
03 Purpose of Collection
Your personal information is collected for the following lawful purposes:
- Processing student applications and enrollment
- Communicating about courses, programs, and educational services
- Providing access to student portals and learning platforms
- Issuing certificates and academic records
- Compliance with legal and regulatory requirements
- Improving our services and educational offerings (with consent)
04 Legal Basis for Processing
We process your personal information based on:
- Consent: You have explicitly consented to the processing of your information
- Contractual Necessity: Processing is necessary to fulfill our educational services contract with you
- Legal Obligation: Compliance with South African education and tax laws
- Legitimate Interest: Improving educational quality and preventing fraud
05 Data Security Measures
We implement appropriate technical and organisational measures to protect your personal information:
- Encryption: HTTPS / SSL encryption for all data transmission
- Access Control: Restricted access to personal data on a need-to-know basis
- Storage Security: Secure servers with regular security updates
- Staff Training: All staff are trained on POPIA compliance and data protection
- Incident Response: Procedures in place to respond to data breaches
06 Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy:
- Application Data: Retained for 2 years after application
- Student Records: Retained for 7 years after graduation (legal requirement)
- Marketing Consent: Until consent is withdrawn
- Account Data: Retained while account is active, plus 1 year after closure
07 Sharing of Information
We do not sell, trade, or rent your personal information. We may share information only with:
- Service Providers: Email providers, hosting services (under strict confidentiality agreements)
- Regulatory Bodies: When required by law or court order
- Educational Partners: With your explicit consent for internships or placements
08 Your Rights Under POPIA
As a data subject, you have the following rights:
- Right to Access: Request confirmation of what personal information we hold about you
- Right to Correction: Request correction of inaccurate or incomplete information
- Right to Deletion: Request deletion of your personal information (subject to legal requirements)
- Right to Object: Object to processing of your information for direct marketing
- Right to Data Portability: Receive your personal information in a structured format
- Right to Lodge a Complaint: File a complaint with the Information Regulator
09 Cookies and Tracking
Our website uses minimal cookies for essential functionality only:
- Session Cookies: For login authentication and student portal access
- Preference Cookies: To remember your settings (with consent)
- No Third-Party Tracking: We do not use Google Analytics or similar tracking services
10 Children's Privacy
Our services are intended for individuals 16 years and older. If you are under 18, parental or guardian consent is required for enrollment. We do not knowingly collect information from children under 16 without parental consent.
11 International Data Transfers
Your personal information is stored on servers located in South Africa. We do not transfer your data outside of South Africa without your explicit consent and appropriate safeguards.
12 Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
13 Changes to This Policy
We may update this POPIA Compliance Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notification to registered users
- Updating the Effective Date at the top of this document
15 Consent Withdrawal
You may withdraw your consent at any time by:
- Emailing info@rogudafashion.co.za
- Logging into your student portal and updating privacy settings
- Contacting our Information Officer
Note: Withdrawal of consent may affect our ability to provide certain services.
Acknowledgement
By submitting any form or using our services, you acknowledge that you have read, understood, and agree to this POPIA Compliance Policy.
