Privacy Policy

RE SURE ACADEMY (PTY) LTD (registration number 2025/126392/07) ("RE-SURE Academy", "we", "us", or "our") is committed to protecting the privacy and personal information of our students and website visitors. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This Privacy Policy is issued in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). By using our website or platform, or by registering for one of our courses, you acknowledge that you have read and understood this Policy.

We collect the following categories of personal information from our students:

• Name and surname
• Email address
• WhatsApp number and phone number
• Province
• Company name, job title, and years in industry
• Target exam date
• How you heard about us (referral source)
• Your marketing communication preference
• Payment information (processed securely via our payment partner, PayFast)
• Course and exam progress and results — such as chapter progress, quiz and mock exam scores, and login activity on the platform
• Questions you ask the Mr. RE AI tutor, including any photographs you upload to it

We collect and process your personal information for the following purposes:

• To create and administer your student account and provide access to our courses
• To process payments for course access
• To send you communications relating to your account, course progress, and payments
• To verify your identity where required
• To improve our platform and the quality of our course material

Your personal information is stored in an encrypted database hosted by Supabase, a reputable database and infrastructure provider that employs industry-standard security measures, including encryption at rest and in transit.

All payment information is processed securely through PayFast, a licensed and PCI DSS-compliant payment gateway. RE-SURE Academy does not store your full card details on our own systems.

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure.

We do not sell your personal information to any third party, ever. We only share your personal information with trusted service providers where necessary to operate our platform, including:

• PayFast— to process and confirm your course and subscription payments. Your card details are entered directly on PayFast's own secure systems and never touch our servers.
• n8n (our workflow automation system) and Brevo (our email delivery service) — together, these send you transactional emails such as registration confirmations, payment confirmations, and course reminders.
• Anthropic, the developer of Claude AI — powers our Mr. RE AI tutor. Questions you ask Mr. RE, and any photos you upload to it, are sent to Anthropic to generate a response. Anthropic does not use this data to train its models on your information without authorization.
• Supabase — our secure database and authentication provider, which stores and processes your account information. See Section 4 for more detail.

These service providers are only given access to the information necessary for them to perform their function and are contractually required to keep your information secure and confidential.

In addition, when you use the free Mr. RE demo on our public website before registering, we record a one-way cryptographic hash of your IP address in order to enforce the free question limit and prevent abuse of it. We do not store your raw IP address, and this hash is not linked to any account.

As a data subject under POPIA, you have the right to:

• Access the personal information we hold about you
• Request that we correct any inaccurate or outdated personal information
• Request that we delete your personal information, subject to any legal or contractual obligations we may have to retain it
• Object to the processing of your personal information in certain circumstances

To exercise any of these rights, please contact us at info@re-sureacademy.co.za.

We will only send you marketing communications where you have opted in to receive them. You may unsubscribe from marketing communications at any time by using the unsubscribe link included in any marketing email, or by contacting us directly at info@re-sureacademy.co.za. Opting out of marketing communications will not affect your access to course-related or transactional communications necessary for the operation of your account.

Our website and platform use essential cookies only. These cookies are necessary for core functionality, such as keeping you logged in and remembering your session, and do not track you for advertising purposes. We do not use third-party tracking or advertising cookies.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact us at info@re-sureacademy.co.za.