1. Introduction
The Nailbox SA (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or enroll in our training programs.
This policy complies with the Protection of Personal Information Act (POPIA) of South Africa and other applicable privacy laws.
2. Information We Collect
2.1 Personal Information
We may collect the following types of personal information:
Student Enrollment Information:
- Full name, ID number, and contact details
- Educational background and qualifications
- Employment history (if relevant to course requirements)
- Emergency contact information
- Banking details for payment processing
Website and Communication:
- Email address (newsletter subscriptions, inquiries)
- Phone number and contact preferences
- Technical information (IP address, browser type, device information)
- Website usage data and analytics
Training and Assessment Records:
- Course attendance and participation records
- Assessment results and certification information
- Progress tracking and performance evaluations
- Feedback and course evaluations
2.2 Special Personal Information
We may collect special categories of personal information only where necessary and with your explicit consent:
- Health information (for course safety requirements)
- Photographs/videos for marketing purposes (with separate consent)
3. How We Use Your Information
We use your personal information for the following purposes:
Educational Services:
- Processing course applications and enrollments
- Delivering training programs and educational content
- Conducting assessments and issuing certifications
- Monitoring attendance and academic progress
- Providing student support services
Administrative Purposes:
- Communicating about courses, schedules, and updates
- Processing payments and managing accounts
- Maintaining student records as required by law
- Responding to inquiries and providing customer support
Legal and Regulatory Compliance:
- Reporting to QCTO and other accreditation bodies
- Complying with skills development legislation
- Meeting record-keeping requirements
- Facilitating workplace skills development initiatives
Marketing and Communication:
- Sending newsletters and course updates (with consent)
- Improving our services based on feedback
- Website analytics and user experience enhancement
4. Legal Basis for Processing
We process your personal information based on:
- Consent: When you voluntarily provide information or subscribe to communications
- Contract: To fulfill our obligations under training agreements
- Legal Obligation: To comply with QCTO requirements and skills development legislation
- Legitimate Interest: For administrative purposes and service improvement
5. Information Sharing and Disclosure
We may share your personal information with:
Regulatory Bodies:
- QCTO (Quality Council for Trades and Occupations)
- Department of Higher Education and Training
- SETA (Sector Education and Training Authority)
Service Providers:
- Payment processors and banking institutions
- IT service providers and cloud storage services
- Marketing and communication platforms
- Training material providers
Legal Requirements:
- Law enforcement agencies when legally required
- Courts and regulatory authorities
- Professional bodies for certification verification
We do not sell, rent, or trade your personal information to third parties for commercial purposes.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Secure servers and encrypted data transmission
- Access controls and authentication systems
- Regular security assessments and updates
- Staff training on data protection practices
- Secure storage and disposal of physical records
7. Data Retention
We retain your personal information for:
- Student Records: 5 years after course completion (as required by QCTO)
- Financial Records: 5 years for tax and auditing purposes
- Marketing Communications: Until you unsubscribe or withdraw consent
- Website Analytics: 26 months maximum
8. Your Rights
Under POPIA, you have the right to:
Access: Request copies of your personal information Correction: Update or correct inaccurate information Deletion: Request deletion of your information (subject to legal requirements) Objection: Object to processing for marketing purposes Data Portability: Receive your information in a structured format Withdrawal of Consent: Withdraw consent for voluntary processing
To exercise these rights, contact our Information Officer using the details below.
9. Cookies and Website Analytics
Our website uses cookies and similar technologies to:
- Improve website functionality and user experience
- Analyze website traffic and usage patterns
- Remember your preferences and settings
- Provide relevant content and advertisements
You can control cookie settings through your browser preferences.
10. International Transfers
Your personal information is primarily stored and processed within South Africa. If we transfer information internationally, we ensure adequate protection through:
- Adequacy decisions by the Information Regulator
- Standard contractual clauses
- Binding corporate rules
- Your explicit consent
11. Children’s Privacy
Our services are intended for individuals 18 years and older. We do not knowingly collect personal information from children under 18 without parental consent.
12. Updates to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes through:
- Website notifications
- Email communications
- Posted notices at our training facilities
Continued use of our services after updates constitutes acceptance of the revised policy.
13. Contact Information
Information Officer:
Company Name: Jab Nail Box (Pty) Ltd
Trading As: The Nailbox
Founded: 2017
Company Registration: 2017/124918/07
Industry: Beauty & Wellness Training
Type: Skills Development Provider (SDP)
Complaints:
If you believe your privacy rights have been violated, you may lodge a complaint with:
- Our Information Officer (details above)
- The Information Regulator of South Africa: https://www.justice.gov.za/inforeg/
14. Governing Law
This Privacy Policy is governed by the laws of South Africa, including POPIA and other applicable privacy legislation.
Acknowledgment:
By using our services, enrolling in our courses, or providing your personal information, you acknowledge that you have read, understood, and agree to this Privacy Policy.
For questions about this Privacy Policy or our privacy practices, please contact our Information Officer using the details provided above.