Privacy Policy

1. Who is responsible

Punk Coffee Roastery SA, trading as Punk Coffee Roastery International Academy. Company registration number: [to be confirmed]. Registered address: [to be confirmed]. Contact: vuyo@punkcoffeeroastery.com.

Punk Coffee Roastery SA is the controller (responsible party under South Africa's POPIA) of personal data processed through this Academy.

2. Data we collect and why

• Account data (name, email, password hash) — to create and secure your account (contract).
• Learning data (lesson progress, notes, assessment attempts and scores, certificates) — to provide the course, enforce module progression and issue certificates (contract).
• Order data (course bought, amount, tax, order reference, status) — to grant access and keep financial records (contract, legal obligation). We never receive or store your full card or bank details.
• Support messages — to answer your questions (legitimate interests).
• Technical data (IP address, device and browser information, essential cookies/local storage) — to keep the service secure and working (legitimate interests).

3. Who we share data with

• Paddle.com, our Merchant of Record, for selling the course, payments, tax compliance, invoicing and refunds.
• Service providers that host and run the platform (cloud hosting, database, email delivery).
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

Public certificate verification shows only the certificate number, your display name, course title, issue date and any CPD details — never your email or account details.

4. International transfers

Our providers may process data outside South Africa. We use providers with appropriate safeguards.

5. Retention

Account and learning records are kept while your account is active. Order records are kept as required by tax law. Issued certificate records are kept so they can be verified. Other data is deleted or anonymised when no longer needed.

6. Your rights

You may request access, correction or deletion of your personal data, object to processing, or withdraw consent, and you may complain to the Information Regulator (South Africa) or your local data-protection authority. Email vuyo@punkcoffeeroastery.com.

7. Security

We use encryption in transit, access controls, private file storage and role-based permissions to protect your data.

8. Cookies

We use only essential cookies and browser storage needed for sign-in, security, saving quiz progress and checkout. We do not use advertising cookies.