Privacy Policy

1. Who we are

DigitalCampus is owned and operated by The LLC Academy. The LLC Academy is the responsible party (data controller) for personal information processed through the platform.

Information Officer: The Information Officer, The LLC Academy. Contact: info@lanham-love.co.

2. Information we collect

• Identity data: full name, South African ID number (used as the learner login), email address, contact number.
• Enrolment data: programme, cohort, enrolment date, employer (for corporate learners).
• Learning data: progress, submissions, reflections, assessment results, portfolio of evidence, coaching session attendance.
• Payment data: transactions processed via PayFast (we do not store card details).
• Technical data: device, browser, IP address, and cookies (see the Cookie Policy).

3. Purpose and lawful basis

We process personal information to provide the learning service, track compliance-critical enrolment and completion, mark assessments (including AI-assisted marking), issue certificates, generate SETA/QCTO and B-BBEE reporting, and process payments.

Our lawful bases include performance of a contract, compliance with legal obligations (e.g. skills-development and accreditation reporting), and legitimate interest. Where required, we rely on your consent.

4. Sharing

We may share personal information with: your employer/enterprise administrator (for corporate enrolments); SETAs, the QCTO and accreditation bodies; our processors (hosting, email, payments via PayFast, AI marking via the Anthropic API); and where required by law.

Where personal information is processed outside South Africa (for example by cloud hosting or AI providers), we use providers that offer protection substantially similar to POPIA and put appropriate safeguards in place.

5. Retention

We retain personal information for as long as necessary to provide the service and to meet accreditation, tax and B-BBEE record-keeping obligations.

Retention periods vary by record type. Accreditation, payment and B-BBEE records are kept for the minimum periods required by the applicable legislation, after which they are securely deleted or anonymised.

6. Your rights

Subject to POPIA, you may request access to, correction or deletion of your personal information, object to processing, and lodge a complaint with the Information Regulator.

Information Regulator (South Africa): inforegulator.org.za. Complaints may be sent to POPIAComplaints.IR@inforegulator.org.za.

7. Security

We apply appropriate technical and organisational measures, including row-level security, encryption in transit, and least-privilege access. No system is perfectly secure; we will notify you and the Regulator of breaches as required by POPIA.