PROTECTION OF PERSONAL INFORMATION ACT (POPIA) PRIVACY NOTICE

1. Personal Financial & Institutional IdentificationThis Privacy Notice applies to YTW Training & Consultation (PTY) Ltd(Registration Number: 2020/838782/07), with its principal address at 35 Pinewood Avenue, Voorbrug, Delft, Cape Town (hereinafter referred to as "YTW"), and its designated technology partner, Learn Blended.

2. Purpose of CollectionYTW collects, processes, and stores your personal information—specifically your 13-digit South African Identity Number or Foreign Passport Number, Curriculum Vitae (CV), and certified copies of prior qualifications—solely for the purposes of:

• Official enrollment and academic registration into accredited training programs.
• Portfolio of Evidence (PoE) compilation, continuous assessment verification, and internal moderation.
• Mandatory statutory reporting to the Quality Council for Trades and Occupations (QCTO)and relevant SETAsfor the upload of credits to the National Learner Records Database (NLRD).
• Statutory Body Disclosure:Your data will be shared with the QCTO and SAQA/NLRD as required by the National Qualifications Framework (NQF) Act.
• Employer/SME Client Visibility:Your employer (the SME client sponsoring this training) will have administrative access onlyto data regarding your course progress, attendance, and final competency status (Competent / Not Yet Competent). Your employer is strictly prohibited from viewing or downloading your highly sensitive foundational documents (such as certified IDs and past certificates), which remain locked under the exclusive view of YTW's Senior Administration and internal Assessors.
• No Third-Party Agencies:No verification data will be shared with external background check agencies; all credentials are authenticated 100% internally by qualified YTW Assessors.

3. Cross-Border Data Transfer

Your personal data is processed and hosted via YTW's cloud infrastructure partner, BrainCert, utilizing secure cloud data centers located within Europe (European Union). YTW guarantees that your data is protected under strict international privacy frameworks, maintaining SOC2 Type 2and ISO 27001 certifications, which provide a level of protection equivalent to or higher than South Africa's POPIA guidelines.

4. Third-Party Disclosure & Visibility Boundaries

5. Statutory Data Retention

In accordance with Section 14 of POPIA and the record-keeping mandates governing accredited Skills Development Providers in South Africa, your personal data, academic records, and Portfolios of Evidence will be safely archived in a secure cloud repository for a mandatory period of five (5) yearsfollowing the completion or termination of your training program. Upon expiration of this period, all records will be permanently de-identified or securely destroyed.