POPIA Compliance

Last updated: 4 August 2026

Working draft. This page has not been reviewed by a lawyer. It describes MK Global SA's intended practice in plain terms and should be checked by a qualified professional before the site goes live.

Our commitment

MK Global SA (Pty) Ltd is committed to handling personal information responsibly and in line with the Protection of Personal Information Act, 2013 (POPIA). This page sets out how we do that. It should be read alongside our Privacy Policy, which covers the same ground in plainer terms.

Responsible party

MK Global SA (Pty) Ltd is the responsible party for personal information collected through this website. You can reach us at solutions@mkglobal.co.za.

Open item: formal registration of an Information Officer with the Information Regulator is still outstanding and should be completed before the site goes live with a working enquiry form.

What we process

Through the enquiry form: name, company, work email, phone number (optional), sector, and a free-text description of the problem you'd like help with. This is ordinary personal information, not special personal information as defined by POPIA (we don't ask for ID numbers, health information, or similar).

Through a course purchase: your name and email address, the amount paid and a payment reference, received from Paystack, which processes the payment. We do not receive or store card or bank details. Through the Management Development Programme: learner assessment records, module scores, the workplace evidence you choose to submit (which you must anonymise), your improvement project, and the name and email address of your workplace assessing manager. If you give written consent, we also record live sessions. The supervised final knowledge assessment includes a photo identification check and a brief live camera room scan. This is ordinary personal information, not special personal information as defined by POPIA.

Purpose of processing

Solely to respond to and act on your enquiry: to contact you, arrange a walkthrough, and prepare a scope and quotation. We do not process your information for any other purpose without telling you first.

For course purchases and the programme: to process your payment, enrol you, deliver and assess the programme, give you feedback, and keep an evidence file that supports your certificate. The identity check and room scan are used only to confirm who is taking the supervised assessment and that it is taken fairly.

Lawful basis

You provide this information voluntarily by submitting the form, which is your consent to its use for the purpose stated above.

For purchases and the programme, we process your information to carry out the agreement with you (your enrolment). Recordings are made only with your written consent, which you can withdraw. You are told about the identity check and room scan before the assessment.

Your rights as a data subject

Access the personal information we hold about you.
Request correction of inaccurate or outdated information.
Request deletion of your information.
Object to processing you're not comfortable with.
Lodge a complaint with the Information Regulator (South Africa) if you believe your information has been mishandled.

Operators (third-party processors)

Two operators process enquiry data on our behalf, under our instruction, so that the enquiry form works:

Vercel Inc. (United States): website hosting and the serverless function that receives form submissions.
Resend (Plus Five Five, Inc.) (United States): transactional email delivery, both the enquiry notification to us and the confirmation to you.

We do not use advertising or CRM processors on this site.

For course purchases and the programme, these providers also process information so that purchases and live sessions work:

Paystack: payment processing for course purchases.
Zoom: video sessions and, with your consent, recordings.

Resend also sends your enrolment confirmation, and Vercel hosts the checkout.

Analytics

If you consent to analytics cookies, Google Analytics 4 (Google LLC, United States) processes usage data such as pages viewed and approximate location to help us improve the site. Google also processes some of this data for its own purposes under its own terms, so its status may differ from the enquiry-form operators above. No analytics data is collected or sent to Google unless you consent, and you can withdraw consent at any time.

Open item: Google's exact classification and a signed data processing agreement are open items for legal review before launch with analytics enabled.

Cross-border transfer

Both operators are based in the United States, so submitting the enquiry form transfers your personal information outside South Africa. Section 72 of POPIA permits this where the recipient is bound by rules providing an adequate level of protection, or where the data subject consents. Both providers offer Data Processing Addendums with Standard Contractual Clauses for this purpose. The analytics transfer to Google (United States) occurs only if you consent to analytics cookies.

Open item: the signed DPAs with Vercel and Resend should be in place, and this wording confirmed by legal counsel, before the site goes live with a working enquiry form.

Paystack, Zoom, Resend and Vercel may process information outside South Africa. Section 72 of POPIA permits this where the recipient is bound by rules or agreements that provide an adequate level of protection, or where you consent.

Retention

Learner evidence files and assessment records are kept for three years after course completion or withdrawal, to support your certificate, quality checks and any query about an assessment decision. They are then deleted from active and backup storage. Enquiry records are kept only for as long as reasonably necessary.

Security safeguards

We take reasonable technical and organisational measures appropriate to the information involved to protect it from loss, unauthorised access, and misuse.

Lodging a complaint

If you believe we have not complied with POPIA, you can contact us directly at solutions@mkglobal.co.za, or lodge a complaint with the Information Regulator (South Africa).