Privacy notice

Who is responsible

Brij Tutoring is the responsible party for the personal information described here. For any privacy question or request, email admin@brijtutors.com.

What we collect

When you send an enquiry

• Your name and email address
• Your phone number, if you choose to give it
• The curriculum, subjects and year group you tell us about
• Whatever you write in the message box

When you buy a package

• Your name, email address and optionally your phone number
• The student’s name, if different from yours
• Which package you bought, the amount, and a payment reference

We never receive your card details. Card and Instant EFT payments are entered directly on Paystack’s hosted payment page. Paystack tells us only whether the payment succeeded, for how much, and against which reference.

Automatically

Our host records standard server logs, including IP addresses, for security and abuse prevention. We use IP addresses in memory to rate-limit the enquiry and checkout forms. This site sets no advertising or analytics cookies, which is why you have not been asked to accept any.

Why we use it, and on what basis

• To answer your enquiry — because you asked us to, by submitting the form and ticking the consent box.
• To deliver tutoring you have paid for — to perform our contract with you.
• To keep records of sales — to meet our legal obligations, including tax record-keeping.
• To protect the site from abuse — our legitimate interest in keeping the service running.

We do not sell your information, and we do not use it for marketing unrelated to what you contacted us about.

Children’s information

Much of our teaching is with students under 18. Where a student is a minor, we ask that a parent or legal guardian makes the enquiry and the purchase, and gives consent on the child’s behalf, as POPIA requires. We only collect the minimum needed to teach them well.

Who we share it with

Only the operators we need to run the service, each of whom is bound to protect it:

• Paystack — payment processing.
• Resend — sending the emails this site generates.
• Vercel — hosting the website.
• Your tutor — the details needed to teach the student.

Some of these process data outside South Africa. POPIA permits this where the recipient is subject to comparable protection, and these providers operate under recognised data-protection frameworks.

How long we keep it

• Enquiries that do not become bookings: up to 12 months, then deleted.
• Student and tuition records: for as long as we are teaching you, and up to 3 years afterwards.
• Sales and payment records: 5 years, as South African tax law requires.

How we protect it

• The whole site is served over HTTPS.
• Credentials are held as server-side environment variables and are never exposed to the browser.
• Payment notifications are cryptographically verified before we act on them.
• Access to enquiry and student records is limited to those who need it.

Your rights

Under POPIA you may:

• ask what personal information we hold about you;
• ask us to correct or delete it;
• object to how we are using it;
• withdraw consent at any time, without affecting past processing;
• complain to the Information Regulator of South Africa if you are not satisfied with how we have handled it.

To exercise any of these, email admin@brijtutors.com. We will respond within 30 days.

Changes to this notice

If we change how we handle personal information, we will update this page and the date above.