Privacy Policy

This Privacy Policy explains how BrilliantMathsTutors (the “responsible party”, “we”, “us” or “our”) processes personal information through https://brilliantmathstutors.co.za/, related digital services, enquiries and client or supplier relationships.

Current business and contact details, including the channel for privacy enquiries, are available Here.

We may process identifying and contact information, enquiry and correspondence records, account or transaction details where relevant, service-delivery records, billing information that is not retained by a payment processor, technical and security logs, device or browser information, consent choices, and website interaction information.

We aim to collect only information that is adequate, relevant and reasonably necessary for the stated purpose.

We generally collect personal information directly from the person concerned through forms, email, telephone, messaging, account registration, orders, support requests or contractual dealings. We may also receive information from authorised representatives, referral partners, public business records, payment providers, hosting and security operators, or other lawful sources where direct collection is not reasonably practicable.

We process personal information to respond to enquiries; prepare quotes; conclude and perform agreements; provide, support and improve services; administer accounts and payments; secure and operate the website; maintain business and legal records; comply with legal duties; prevent misuse or fraud; communicate service information; and conduct direct marketing where permitted.

Depending on the circumstances, processing may be based on consent, contractual necessity, a legal obligation, protection of a legitimate interest, or the legitimate interests of the responsible party or a third party. Consent is not treated as the only possible ground for every processing activity.

Information submitted through contact forms, email, telephone or messaging is used to respond, keep an appropriate record, provide requested information, prepare a proposal, deliver services, and protect against abuse. Fields marked as required are necessary to process the request; failing to provide them may prevent us from responding or delivering the requested service.

We use essential technologies for security, consent storage and core website operation. Optional functional, analytics, marketing and external-media technologies are controlled through Bloom Consent. Google services may remain technically available in a limited, cookieless measurement state where Google Consent Mode supports that behaviour, while optional storage remains denied.

The current technical service and storage disclosures are listed in the disclosure schedule below.

We may share personal information with contracted operators and recipients that support hosting, security, communications, analytics, advertising, payment processing, accounting, professional advice, service delivery, backups and business administration. They receive only the information reasonably required for their function and are expected to protect it under applicable law and contractual duties.

We do not sell personal information as a business model.

Where personal information is transferred outside the Republic of South Africa, we take reasonable steps to ensure that the recipient is subject to a law, binding corporate rules, agreement or other protection that provides an adequate level of protection, or that another lawful basis for the transfer applies. The locations and safeguards depend on the operators actually used.

We retain personal information for the period reasonably needed for the purpose collected, contractual and support requirements, legitimate operational needs, dispute management, legal or regulatory obligations, and applicable prescription or record-keeping periods. Information is deleted, destroyed or de-identified when retention is no longer authorised, subject to lawful exceptions and backup rotation.

We use safeguards appropriate to the nature of the information and reasonably foreseeable risks. These may include access control, secure transport, software maintenance, malware and intrusion controls, backups, logging, confidentiality duties, vendor review and incident procedures. No internet transmission or storage system can be represented as absolutely secure.

A data subject may ask whether we hold personal information about them; request access; ask for correction, deletion or destruction where permitted; object to certain processing; withdraw consent where processing depends on consent; object to direct marketing; and lodge a complaint with us or the Information Regulator.

Requests may be submitted Here. We may request information reasonably necessary to verify identity and authority before acting.

We may send direct marketing where the recipient has consented or another permission recognised by law applies. Every qualifying electronic marketing message should identify the sender and provide a practical way to opt out. Service, security, billing and contractual communications are not treated as marketing merely because they relate to an existing relationship.

Our general website is not directed at children. We do not intentionally process the personal information of a child without a competent person’s authorisation or another lawful basis. We also avoid collecting special personal information unless it is necessary, authorised and accompanied by suitable safeguards.

Unless specifically disclosed for a service, we do not make decisions that have legal or similarly significant effects solely through automated processing. Routine security, spam, fraud, analytics and website-personalisation tools may use automated signals but remain subject to appropriate human oversight where required.

If we have reasonable grounds to believe that unauthorised access to or acquisition of personal information has occurred, we will assess the incident and notify the Information Regulator and affected data subjects when required, subject to lawful delay or instruction.

Please first contact us Here so that we can investigate and respond. A person may also lodge a complaint with the Information Regulator of South Africa using the Regulator’s current official complaint channels.

Links or embedded services operated by third parties are provided for convenience or functionality. We do not control their independent processing practices. Users should review the relevant provider’s privacy information before supplying personal information to that provider.

We may amend this policy to reflect changes in law, services, technology or processing practices. The current version will be published on https://brilliantmathstutors.co.za/ with its effective date.

Privacy and general enquiries may be submitted Here.