// LEGAL

Privacy Policy

Last updated: 13 June 2026

Effective date: 13 June 2026

This Privacy Policy explains how Amanzi Connexions (Pty) Ltd (“we”, “us”, “our”) collects, uses, stores, shares, and protects your personal information when you use the Electrical Trade Test Simulator (the “Service”). It is intended to comply with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African data protection laws.

By using the Service, you agree to the processing of your personal information as described in this policy. If you do not agree, please do not use the Service.

1. Responsible party

The responsible party (data controller) is:

Amanzi Connexions (Pty) Ltd
Email: support@tradetestsim.co.za

2. What personal information we collect

We collect personal information that you provide directly to us, information generated through your use of the Service, and limited information from third parties (such as our payment processor).

2.1 Information you provide

  • Account information: email address, password (stored as a salted hash, never in plain text), first and last name (if provided).
  • Subscription information: payment method details (handled and stored by Paystack, not by us), subscription plan, billing history.
  • Communications: any messages you send us via contact forms, support requests, or email.
  • Contact form submissions: name, email, phone number, institution name, and message content if you contact us via the website contact form.

2.2 Information generated through use

  • Usage data: which circuits you have practised, which ARPL quiz questions you have answered, when you log in, how long you use the Service.
  • Technical data: IP address, browser type, device type, operating system, referring URL, pages visited, timestamps. This data is collected automatically through standard web server logs and cookies.
  • Wiring attempts: the specific circuits you wire on the Service’s workspace, used for validation and stored temporarily to provide the Service.

2.3 Information from third parties

  • Payment processor (Paystack): transaction status, subscription state, last four digits of payment card. We do not receive or store full card numbers, CVV codes, or other sensitive payment data.
  • Analytics or error monitoring services (if used): aggregated and anonymised usage statistics; we do not link these back to individual users without their consent.

3. Why we collect and use your information

We collect and process your personal information for the following purposes:

  • To provide the Service — including account creation, authentication, delivering circuit practice and validation, and tracking your progress.
  • To process payments — via Paystack, in order to fulfil your subscription.
  • To communicate with you — about your account, subscription, support requests, security alerts, and important Service changes.
  • To improve the Service — by analysing aggregated usage patterns to identify which features work well and where improvements are needed.
  • To comply with legal obligations — including tax records, accounting, fraud prevention, and responses to lawful requests from authorities.
  • To enforce our terms and protect our rights — including investigating violations and preventing abuse.

4. Lawful basis for processing (POPIA)

Under POPIA, we process your personal information on the following lawful grounds:

  • Consent — you consent to processing by creating an account and accepting this policy.
  • Contract — processing is necessary to provide the Service you have subscribed to.
  • Legitimate interests — we have a legitimate business interest in operating, improving, and protecting the Service, balanced against your rights.
  • Legal obligation — some processing is required by South African law, such as tax record retention.

5. How we share your information

We do not sell, rent, or trade your personal information. We share it only as described below:

  • Service providers — third parties that help us operate the Service, including Supabase (database and authentication hosting), Vercel (web hosting, global content delivery), Paystack (payment processing), Cloudflare (DNS, traffic routing, anti-spam via Turnstile), Zoho Mail (business email), Web3Forms (contact form delivery), and hCaptcha (anti-spam for contact form). These providers process personal information on our behalf under appropriate agreements.
  • Institutional customers — if you are an institutional learner using a seat assigned by your training centre, college, or school, that institution may receive aggregated usage data about your engagement with the Service (such as circuits practised and progress) as part of their service agreement with us. This is described in your institution’s own privacy notice and learner agreement.
  • Legal compliance — we may share your information when required by law, court order, or to protect our legal rights or the safety of others.
  • Business transfers — if we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will give you notice and an opportunity to delete your account before any such transfer takes effect.

6. International data transfers

Some of our service providers operate globally, and your personal information may be processed in countries outside South Africa, including the European Union and the United States. Where this happens, we take steps to ensure that adequate safeguards are in place, including:

  • Using service providers that comply with internationally recognised data protection frameworks (such as EU GDPR, which provides protections equivalent to or stronger than POPIA).
  • Our primary database and authentication services are currently hosted by Supabase in the European Union (Ireland), which is covered by GDPR. South African user data transferred to this region is protected under EU data protection laws.
  • Reviewing and updating our service provider agreements to ensure POPIA compliance for cross-border data flows.

7. How long we keep your information

We keep your personal information only for as long as necessary to provide the Service or to meet legal, accounting, or reporting requirements.

  • Active account data — retained for as long as your account is active.
  • Cancelled or deleted accounts — most personal information is deleted within 30 days of account deletion. Some information (such as billing records) is retained for the period required by South African tax and accounting law, currently five years.
  • Inactive accounts — we may delete or archive accounts inactive for 12 months or more, with reasonable notice.
  • Server logs — typically retained for up to 90 days for security and operational purposes.

8. Your rights under POPIA

You have the following rights regarding your personal information:

  • Right of access — you may request a copy of the personal information we hold about you.
  • Right of correction — you may request that we correct inaccurate or incomplete information.
  • Right of deletion — you may request that we delete your information, subject to legal retention requirements.
  • Right to object — you may object to processing based on legitimate interests.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time. This will not affect processing carried out before withdrawal.
  • Right to complain — you may lodge a complaint with the Information Regulator if you believe we have not complied with POPIA. Contact details below.

To exercise any of these rights, contact us at support@tradetestsim.co.za. We will respond within 30 days. We may need to verify your identity before processing certain requests.

9. Information Regulator (South Africa)

The Information Regulator is the supervisory authority responsible for enforcing POPIA. You may contact them with complaints or queries:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za
Website: https://inforegulator.org.za

10. How we protect your information

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include:

  • Encrypted transmission of data using HTTPS/TLS for all communication with the Service.
  • Encrypted storage of passwords (salted hashes, never plain text).
  • Row-Level Security on database tables to ensure users can only access their own data.
  • Multi-factor authentication on administrative access to our infrastructure.
  • Regular review of access controls and security practices.
  • Reputable third-party providers (Supabase, Vercel, Cloudflare, Paystack) with strong security track records.

No system is completely secure. If we become aware of a security incident that may have compromised your personal information, we will notify you and the Information Regulator as required by POPIA.

11. Cookies and similar technologies

We use cookies and similar technologies to:

  • Keep you signed in (session cookies).
  • Remember your preferences (such as dark or light mode if applicable).
  • Understand how the Service is used (analytics).
  • Detect and prevent bots and spam (Cloudflare Turnstile on authentication flows; hCaptcha on the contact form).

You can control cookies through your browser settings, but disabling some cookies may affect your ability to use parts of the Service.

12. Children’s privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16 without parental or guardian consent. If you become aware that a child under 16 has provided us with personal information without such consent, please contact us so we can investigate and, where appropriate, delete the information.

For users between 16 and 18, you confirm that you have parental or guardian permission to use the Service and that they have reviewed this policy.

13. Third-party links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. You should review their privacy policies separately.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above and, for material changes, give you reasonable notice via the email associated with your account or a notice in the Service. Your continued use of the Service after notice constitutes acceptance of the updated policy.

15. Contact

For privacy-related questions, requests, or complaints, contact us at:

Amanzi Connexions (Pty) Ltd
Email: support@tradetestsim.co.za
Website: https://tradetestsim.co.za