AwareStaff — Data Processing Terms (Operator Agreement)
Effective date: November 2026
These terms form part of the agreement between Safari Stays (Pty) Ltd, trading as AwareStaff (the operator), and each business customer (the responsible party), as required by sections 20 and 21 of POPIA.
- What we process: learners' names, work emails, employer details, course starts, passing quiz scores, completion dates and certificate records. Lesson progress and quiz answers are stored locally in the learner’s browser — only to deliver training and training records to the customer.
- Instructions: we process this information only for the customer's purposes and on its instructions, and never for our own marketing.
- Confidentiality: everyone with access to the information is bound by confidentiality.
- Security: we maintain appropriate, reasonable technical and organisational security measures as required by section 19 of POPIA.
- Sub-processors: we use the service providers described in our Privacy Policy, each bound by written obligations equivalent to these terms.
- Cross-border transfers: where information is processed outside South Africa, we ensure the protections required by section 72 of POPIA.
- Security compromises: we will notify the customer immediately upon becoming aware of any unauthorised access to its learners’ information, and in any event within 72 hours as a contractual maximum. This is not a statutory 72-hour waiting period. We will assist the customer, as responsible party, to notify the Information Regulator and affected learners as soon as reasonably possible under section 22 of POPIA.
- Requests from learners: we will pass any request from a learner to the customer and assist it to respond.
- End of service: when a customer closes its account, it can export its training register, and we will delete learner account details and course-start records within 12 months unless the law requires otherwise or the customer instructs us differently. Completion records, including passing scores, and certificate proof may be retained for up to 5 years after completion unless the customer instructs earlier deletion or the law requires retention. Browser-held progress and answers are controlled on the learner’s device.
- Customer responsibilities: the customer confirms it has a lawful basis to enrol its employees and has told them about the training and how their information will be used.