Privacy notice

Version 1.0 · Effective 10 November 2026

Who is responsible

EasyGov AI Training (learn.easygov.ai) is run by EasyGov (Pty) Ltd, a private company registered in South Africa (Reg. no. 2024/365166/07). EasyGov (Pty) Ltd is the "responsible party" for your personal information under the Protection of Personal Information Act (POPIA). Contact: [email protected].

Our Information Officer is Sagie Chetty, Director of EasyGov (Pty) Ltd. Contact him at [email protected].

What we collect and why

• When you sign up: your email address, a one-time 6-digit sign-in code (valid for 10 minutes, stored only in scrambled form and deleted after 1 day) and a record of the boxes you ticked and when. We use it to sign you in, run your account and contact you about your training.
• Optional details: your first name. We don't ask for your phone number on this site.
• Readiness form: your answers to a fixed list of questions (for example your devices, how you use AI now, your goals, the time and budget you have in mind, topics you want or want to avoid, and an optional age band). We use them to suggest a starting level and a set of modules. Sagie checks every suggestion himself before you see it.
• Bookings and proposals: If you book by phone: your name, South African mobile number, the learning path you choose (if any) and where you'd like to meet. If we meet at your place, your suburb or address, used only to get there and work out the transport fee, and deleted with your name and number. The slots you pick, the date, time and format (online or in person, and the venue we agree), your proposal and price, and proposal notes Sagie adds (we don't record your employer, your clients, or ID, tax or bank numbers in these notes). Changes or cancellations come through Ask to cancel on your account page (if you have one), by reply on WhatsApp or SMS, or by email.
• Bot protection: the sign-up form uses Cloudflare Turnstile to block automated sign-ups. Cloudflare processes technical data about your browser and connection to do this.
• Abuse protection: to stop misuse we limit how often codes can be requested and tried. For this we keep a scrambled (keyed hash) code made from your IP address or email and the time window, never the raw IP address, and delete it within about an hour.

Legal basis: your consent (POPIA section 11(1)(a)) when you tick the sign-up box; carrying out the training you ask for (section 11(1)(b)); keeping business and tax records the law requires (section 11(1)(c)); and our legitimate interest in keeping the site secure (section 11(1)(f)). You can withdraw consent at any time; this doesn't affect what we did before.

You don't have to give us your details, but without an email address we can't create an account, and without a name and mobile number (or email) we can't book you in.

Cookies

We use only strictly necessary cookies. When you sign in we set one cookie, tl_sess, which keeps you signed in for up to 30 days or until you sign out. It is HttpOnly and Secure (it can't be read by other scripts and is sent only over HTTPS), and we store your session only in scrambled (hashed) form. Because the site can't work without it, there is no opt-out other than not signing in. Cloudflare Turnstile may use its own short-lived technical data to check you're not a bot. We use no advertising cookies, no tracking tools and no analytics: we keep no analytics or visit counts, and our own systems don't log what you send. (Our hosting provider, Cloudflare, may keep its own technical records to run and secure its network.)

Emails we send

Sagie sends sign-in codes and confirmations by email from our own mailbox. These are service emails, not marketing. Emails you send to [email protected] are forwarded to our Gmail inbox, and our replies come from the mailbox Sagie answers from.

Marketing emails only if you opt in. If you tick the optional box, we send EasyGov news and offers no more than twice a month (POPIA section 69). Every marketing email has a one-click unsubscribe, and you can also email [email protected]. Not ticking the box never affects your training.

Who else handles your information

• Cloudflare: hosting, our database, bot protection and receiving email sent to @easygov.ai.
• Google (Gmail and Calendar): our email is hosted by Google. Emails to @easygov.ai are forwarded to our Gmail inbox, and we send and reply from there. Bookings are kept in our Google Calendar, with your address if we meet at your place.
• WhatsApp (Meta): when we message you about your booking there. WhatsApp's own terms and privacy policy also apply to your use of WhatsApp.
• Microsoft (Teams): for online sessions, if you choose to meet online. In-person sessions (at our office in Parklands, at another venue we name, at your place, or at a place you suggest that we agree) don't use Teams.

They act as our "operators" and may use your information only to provide their service to us. We don't sell your information or share it for anyone else's marketing.

Information sent outside South Africa

Some of our providers store or process information outside South Africa. Cloudflare runs a global network. Our email is hosted by Google, which may process it outside South Africa. WhatsApp (Meta) may process booking messages outside South Africa. We send them because they're needed to arrange the session you asked for (POPIA section 72(1)(c)). Under POPIA section 72 we send information outside South Africa only where the provider is bound by a written agreement or by law to protect it to a standard at least as good as POPIA, or where the transfer is needed to provide the service you asked for. By ticking the sign-up box you also agree to this.

How long we keep it

• Account, readiness answers, sessions and proposal notes: about 12 months after our last contact with you (your last sign-in or action on the site, or our last confirmation or decision on your booking or proposal). This runs automatically on site activity, so it happens within about 12 months rather than on an exact day. We then delete your forms, sign-in sessions, codes, copies of emails we sent you and internal alerts naming you, replace your email address with an anonymous code, and clear your name and proposal notes. Booking and proposal records are then kept with no person attached, so no personal information remains in them. If you have a booking in the last 12 months or in the future, we keep your record until then.
• Phone booking details (name, mobile number and, if we met at your place, your address): about 12 months after your last booked session, or within about 3 months if no session is booked.
• Sign-in codes: valid for 10 minutes; the record is deleted after 1 day.
• Abuse-protection codes (scrambled, never the raw IP address): deleted within about an hour.
• Payment records: proof of your EFT payment is kept in the company's own accounting records (not on this website) for as long as tax and company law require (at least 5 years for tax, and 7 years for company accounting records).
• Marketing consent: we keep proof of your consent while you're subscribed. If you unsubscribe, we keep a one-way scrambled code of your email address on a do-not-email list so we don't email you again. If we've had no contact with you for 12 months, your address is replaced and you're removed from the mailing list.

Your rights

You can ask us, free of charge, whether we hold information about you and what it is; ask us to correct or delete it; object to how we use it; and withdraw consent. Email [email protected]. We may need to confirm who you are, and we'll reply within 30 days. We may keep records the law requires us to keep.

If you're unhappy with our answer, you can complain to the Information Regulator: inforegulator.org.za · [email protected].

Children

This site is for adults (18+). We don't knowingly collect information about children. If a learner under 18 wants training, a parent or guardian must contact us first and give consent.

Security

We use HTTPS, scrambled sign-in codes and sessions, limits on repeated tries, limited access (only Sagie) and bot protection. We never ask for passwords or card details. If we learn of a breach that affects you, we'll tell you and the Information Regulator as POPIA requires.

Changes

If we change this notice we will show the date and version at the top and keep earlier versions available on request.