POPIA Statement

Responsible Party

The responsible party under POPIA is:
Shannon Loder
Operating as: Mzansi Coach
Email: shannon@mzansiready.co.za

What personal information we process

We process the minimum personal information required to deliver the coaching service:

• Name and email address (account registration)
• Job title and dealership details (onboarding — for personalised coaching context)
• Coaching session content (anonymised descriptions of workplace situations)
• Platform usage data (sign-in times, features used)

What we do not process

Mzansi Coach is designed to exclude third-party personal information. Users are instructed — and the platform actively warns — not to enter:

• Customer names, surnames, or initials
• Customer ID numbers, passport numbers, or tax numbers
• Customer phone numbers or email addresses
• Vehicle registration numbers or VINs
• Finance details, credit information, or affordability data
• Banking details or account numbers
• Physical addresses

If personal data is detected in a coaching prompt, the platform will warn the user and decline to process it.

Purpose of processing

We process personal information only for:

• Providing the coaching service to registered users
• Giving managers anonymised team usage insights
• Improving the platform based on usage patterns
• Communicating service updates and changes

Lawful basis for processing

We process personal information on the lawful basis of consent (given at registration), and on the basis of legitimate interest in delivering and improving the coaching service. We do not process special categories of personal information (health data, biometric data, political or religious information).

Data retention

We retain your account data for as long as your account is active. Coaching session content is retained for 90 days to allow you and your manager to review recent sessions. After 90 days, session content is automatically purged. You may request earlier deletion at any time.

Your rights under POPIA

As a data subject, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate information be corrected
• Deletion — request that your personal information be deleted
• Objection — object to the processing of your personal information
• Complaint — lodge a complaint with the Information Regulator of South Africa (inforeg.org.za)

How to exercise your rights

Submit any POPIA request to: shannon@mzansiready.co.za with the subject line “POPIA Request”. Include your name and email address registered on the platform. We will respond within 30 days.

Third-party processors

We use the following third-party processors who are contractually bound to handle data in compliance with applicable privacy law:

• Supabase — database, authentication, and file storage
• OpenAI — coaching response generation (API usage; no-training data settings applied)

Information Regulator

If you are not satisfied with our response to a POPIA request, you may contact the Information Regulator of South Africa:

Information Regulator (South Africa)
Website: www.inforeg.org.za
Email: inforeg@justice.gov.za