Privacy Policy

1. Who This Policy Covers

This policy applies to parents, guardians, learners, students, tutors, Territory Directors, Education Growth Partners, outreach directors, executives, applicants, contractors, and other users of Response Integrity public or operational systems.

• Legal entity: Response Integrity (Pty) Ltd
• Jurisdiction: Republic of South Africa
• Contact: support@responseintegrity.co.za

2. Information We Collect

The exact information we collect depends on your role and how you use the platform.

• Identity and account data such as names, email addresses, phone numbers, role, login details, and account status.
• Learner and family data such as learner name, age, grade, school, enrollment details, intake-cycle or waitlist status, parent contact data, and consent records.
• Academic scope and intake data such as school topic coverage, upcoming curriculum scope, topic concerns, parent-reported response symptoms, learner history, fit-review inputs, and topic-priority information provided during planning or onboarding.
• Session and academic data such as diagnoses, recommended starting phases, topic maps, drill logs, reports, progression states, phase and stability records, observations, scheduling activity, and session outcomes.
• Recording and compliance data such as session recordings, audio, video, submitted recording files, associated timestamps, and related compliance artifacts, which may include transcript-related records where available.
• Payment and billing data such as payment status, transaction references, plan status, and subscription-related records. Card processing is handled through payment processors such as Payfast; Response Integrity does not store full card details.
• Operational workforce data such as ID documents, contractor records, onboarding acceptances, certifications, audit history, banking details for payout administration, and performance-linked operational records.
• Affiliate and acquisition data such as referral codes, tracked links, encounter records, lead and close tracking, payment attribution, and campaign or source information.
• Technical and device data such as IP address, device and browser information, access logs, session identifiers, notification subscription data, and usage records inside the platform.

3. How We Collect Information

• Directly from you when you sign up, apply, enroll, upload documents, book sessions, make payments, or contact Response Integrity.
• Directly from parents or guardians during intake, onboarding, scope collection, waitlist registration, schedule alignment, diagnostics preparation, and related planning activities.
• Automatically through platform use, authentication flows, scheduling systems, logs, notifications, and browser or device interactions.
• From Response Integrity operational users such as tutors, TDs, EGPs, or executives when they record lawful platform observations or workflow actions.
• From service providers and processors used to operate Response Integrity, including payment, storage, scheduling, authentication, and communication providers.

4. Why We Use Information

• To create and manage accounts, onboarding flows, and access permissions.
• To review enrollment fit, intake eligibility, waitlist placement, and lawful service-entry decisions.
• To deliver Response Integrity response-conditioning services, scheduling workflows, learner progression, topic mapping, and reporting.
• To prepare ahead-of-class conditioning using school scope, topic history, parent-reported symptoms, and related academic planning inputs.
• To generate or support phase recommendations, diagnostic starting points, stability tracking, and other rules-based operational outputs inside Response Integrity-OS.
• To process payments, confirm account status, manage early-access eligibility, and administer contractor or affiliate-related payment records.
• To safeguard learners, investigate incidents, review disputes, and maintain system integrity.
• To monitor compliance, quality, audit accuracy, and role performance across Response Integrity operations.
• To operate communications such as service emails, account notices, and browser push notifications where enabled.
• To measure acquisition, referral, and attribution performance.
• To comply with legal, regulatory, tax, safeguarding, fraud-prevention, and record-keeping duties.

5. Recordings and Monitoring

Response Integrity is a recorded, data-driven operating system. Sessions and related operational workflows may generate recordings, logs, metadata, submitted files, and related compliance records.

We use these records for service delivery, safeguarding, quality control, audit review, operational continuity, dispute handling, performance verification, fraud prevention, and lawful system improvement.

6. How We Share Information

We do not sell personal information and we do not use children's data for advertising.

• Assigned tutors, TDs, or relevant Response Integrity operators where access is necessary to deliver or supervise the service.
• Payment processors such as Payfast for transaction handling.
• Technology providers supporting authentication, storage, scheduling, recordings, notifications, and platform infrastructure.
• Professional advisers, regulators, law enforcement, courts, or authorities where disclosure is required or lawfully permitted.
• Internal operational decision-makers where needed for safeguarding, audits, compliance, disputes, or system protection.

7. Children's Information

We process children's personal information only where lawful grounds exist, including parental or guardian involvement where required.

Learner data is handled with heightened care. Response Integrity does not knowingly sell, advertise with, or commercially exploit children's personal information.

8. Storage and Security

• We use role-based access controls and limit access according to operational need.
• We use cloud infrastructure, authentication controls, logging systems, and provider-level security measures appropriate to the services we operate.
• No internet-connected system is absolutely risk-free, but Response Integrity applies reasonable technical and organizational safeguards for the data it controls.

9. International and Third-Party Processing

Some service providers may process or store information outside South Africa. Where this happens, we use providers and arrangements intended to provide appropriate protection for the information involved.

10. Retention

We keep personal information only for as long as necessary for the purposes for which it was collected, unless longer retention is required or justified by law or legitimate operational need.

Some records cannot be deleted immediately on request because Response Integrity may need to retain them for safeguarding, child-protection duties, payment and tax compliance, fraud prevention, disputes, legal claims, audits, contractor administration, session integrity review, intake-history review, waitlist records, or other lawful record-keeping obligations.

11. Your POPIA Rights

• Request access to personal information held about you.
• Request correction or updating of inaccurate information.
• Request deletion where deletion is lawful and does not conflict with Response Integrity's retention duties.
• Object to or limit certain processing where POPIA permits.
• Withdraw consent where processing is consent-based, subject to legal and operational limits.
• Lodge a complaint with the Information Regulator.

12. Data Breaches

If Response Integrity becomes aware of a qualifying data breach, we will investigate, contain, and respond in line with our legal duties, including notification where required by law.

13. Changes to This Policy

Response Integrity may update this Privacy Policy from time to time. The latest version will be posted in the platform or on the website, and continued use after an update means the updated policy applies.