Privacy
Privacy and data.
How we collect, verify, store and retain programme data, and the access controls that govern it.
What we collect
Programme data collected under agreed instruments, together with the consent record, the collection date and the partner that submitted it. We do not collect personal data outside an agreed instrument.
Consent and lawful basis
Collection is consent-based and aligned to POPIA. A record without a consent entry is rejected at ingest rather than corrected afterwards.
Storage, access and retention
Data is held in access-controlled systems, with role-based permissions per programme. Identifiable data is retained only for the period agreed with the programme owner, then destroyed or irreversibly de-identified.
Your rights
Individuals may request access to, correction of, or deletion of their personal data. Requests are handled through the contact page and answered within thirty days.