This policy explains what personal information Third Stripe Academy collects, why, who it is shared with, and your rights under the Protection of Personal Information Act, 2013 (POPIA).

1. Responsible party

[REGISTERED COMPANY NAME] (Pty) Ltd, trading as Third Stripe Academy, is the responsible party for your personal information. Our Information Officer is [NAME OF INFORMATION OFFICER], reachable at [email protected].

2. What we collect

• Account details: your email address and an encrypted (hashed) password. We cannot see your password.
• Practice data: the module, score, difficulty level and time of each practice run, and your difficulty settings.
• Purchase records: the date, amount, pass period and Paystack payment reference. Card details go directly to Paystack and are never seen or stored by us.
• Technical data: our hosting and database providers keep short-term server logs (such as IP address and browser type) for security and reliability.
• Emails you send us when you ask for support.

3. Why we use it

• To create and secure your account, and show you your own practice record on any device (to perform our agreement with you).
• To process payments, manage your pass and keep financial records (agreement and legal obligation).
• To send essential emails such as account confirmation, password resets and receipts.
• To keep the service secure and fix problems (our legitimate interest).

We do not sell your information, show advertising, or use tracking or advertising cookies. We will only send marketing emails if you have opted in, and every such email lets you unsubscribe.

4. Who processes it for us

We use the following operators, each bound to protect your information:

• Supabase — account and practice database, hosted in Ireland (European Union).
• Cloudflare — website hosting and security.
• Paystack — card payment processing.
• [EMAIL PROVIDER, e.g. Resend] — sending account and receipt emails.

Some of these providers store or process information outside South Africa. We only use providers in countries with adequate data protection laws or under binding agreements that give your information protection comparable to POPIA, as section 72 of POPIA requires.

5. Storage on your device

The site stores your login session and a copy of your recent practice record in your browser's local storage so the site works and stays fast. This is essential to the service and is not used for tracking. Signing out removes the practice copy from that device.

6. How long we keep it

We keep your account and practice data while your account is open. If you ask us to delete your account, we delete your account and practice data within 30 days. We keep purchase records for as long as tax law requires (currently five years in South Africa).

7. Security

Information is encrypted in transit. Access rules in our database ensure each user can only read their own practice data, and passwords are stored only in hashed form.

8. Your rights

You may ask us to confirm what information we hold about you, give you a copy, correct it, or delete it, and you may object to processing. Email [email protected]. If you are unhappy with our response, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

9. Children

The service is intended for adults (18 and over) and we do not knowingly collect information from children.

10. Changes

If we change this policy, we will update the date above and, for significant changes, tell you by email.

Who we are

This information is provided in terms of section 43 of the Electronic Communications and Transactions Act, 2002.

Trading name

Third Stripe Academy

Legal name and status

[REGISTERED COMPANY NAME] (Pty) Ltd, a private company registered in South Africa

Registration number

[CIPC REGISTRATION NUMBER]

Directors

[FULL NAME(S) OF DIRECTOR(S)]

Physical address

[PHYSICAL ADDRESS FOR SERVICE OF LEGAL DOCUMENTS]

Email

[email protected]

Telephone

[CONTACT NUMBER]

Website

https://thirdstripeacademy.com

VAT

[VAT NUMBER, or: Not registered for VAT]