POPIA Notice
POPIA compliance information
This notice explains how InclusiVerse supports lawful processing of personal information under South Africa's Protection of Personal Information Act.
Purpose of This Notice
This notice describes how InclusiVerse approaches compliance with the Protection of Personal Information Act, 2013 (POPIA) when handling personal information through the website and platform.
It is intended to help customers, learners, and website visitors understand our role in relation to personal information and the measures we use to support lawful processing.
Responsible Party and Operator Roles
InclusiVerse may act as a responsible party for information collected directly through our public website, enquiries, commercial contacts, and direct customer relationship management activities.
Where a customer uploads employee, learner, or training data into the platform, InclusiVerse generally acts as an operator processing that information on the customer's instructions, subject to our product terms and operational safeguards.
POPIA Processing Principles
We aim to process personal information lawfully and in a reasonable manner that does not unnecessarily infringe privacy rights. We seek to collect data that is relevant, not excessive, and aligned to defined operational purposes.
We also implement safeguards intended to support information quality, security, transparency, and participation rights in line with POPIA expectations.
Security Safeguards
InclusiVerse uses access controls, authentication, role-based permissions, and monitoring measures designed to reduce the risk of loss, misuse, unauthorised access, disclosure, alteration, or destruction of personal information.
Where third-party service providers are used, we seek to ensure they are subject to appropriate confidentiality, security, and processing obligations.
Data Subject Rights
Subject to applicable law and verification requirements, data subjects may request access to personal information, correction or deletion of information, and may object to processing in certain circumstances.
Where InclusiVerse acts as an operator for a customer, requests relating to customer-controlled data may need to be directed to that customer first so the correct responsible party can assess and respond.
Cross-Border Transfers
If information is processed outside South Africa using hosting or service providers in other jurisdictions, we take reasonable steps to implement appropriate contractual and operational safeguards consistent with POPIA requirements.
Questions and Escalation
For POPIA-related questions, requests, or concerns, contact info@inclusiverse.co.za. If you believe your information has been handled unlawfully, you may also have the right to raise a complaint with the Information Regulator of South Africa.
This notice is a general platform-level compliance notice and should be read together with our Privacy Policy, Cookie Policy, and any customer-specific contractual terms.
Last updated: March 13, 2026