Privacy Policy

1. Who we are

Entrepreneur Genie is a platform registered and operating in South Africa. Our registered address and contact details are available on request. You can reach us at info@entrepreneurgenie.africa.

We are the responsible party for the personal information we collect through this website and through our programmes, as defined under the Protection of Personal Information Act 4 of 2013 (POPIA).

2. What information we collect

We collect the following categories of personal information:

• ●Identity information: full name, business name
• ●Contact information: email address, phone number, WhatsApp number, country of residence
• ●Application information: business stage, business challenge, payment plan preference, how you heard about us
• ●Payment information: payment plan selection and payment confirmation records. We do not store card numbers. Card processing is handled by Stripe or Flutterwave.
• ●Programme participation data: lesson progress, exercise submissions, deliverable records, attendance
• ●Community activity: posts, replies, and reactions in programme community spaces
• ●Coaching records: session notes and progress reviews (where applicable)
• ●Communications: emails and WhatsApp messages sent to or from us
• ●Technical data: IP address, browser type, device type, pages visited, and session duration (via analytics tools)

3. Why we collect your information

We collect and process your personal information for the following purposes:

• ●To process your application and enrol you in our programmes
• ●To deliver programme content, live sessions, and community access
• ●To communicate with you about your programme progress and account
• ●To process payments and send payment reminders
• ●To send Genie Weekly and other educational content you have subscribed to
• ●To produce impact reports for ESD and corporate partners (anonymised or with your consent)
• ●To comply with legal and regulatory obligations
• ●To improve our products and services through analytics

4. Legal basis for processing

We process your personal information on the following lawful grounds under POPIA:

• ●Contract: processing necessary to deliver the programme or service you have enrolled in or applied for
• ●Consent: where you have given explicit consent, including for marketing communications
• ●Legitimate interest: for analytics, fraud prevention, and service improvement
• ●Legal obligation: where required by South African law

5. How long we keep your information

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• ●Programme participation records: retained for 7 years after programme completion for audit and alumni purposes
• ●Payment records: retained for 5 years to comply with South African tax and financial record requirements
• ●Marketing consent records: retained until you withdraw consent
• ●Application records: retained for 2 years if unsuccessful, 7 years if accepted

6. Who we share your information with

We do not sell your personal information. We share it only with:

• ●Supabase: our database and authentication provider, hosted within secure data centres
• ●Stripe and Flutterwave: payment processors who handle card and mobile money payments
• ●Resend: email delivery service used to send programme communications
• ●PostHog: privacy-first analytics platform used to understand how our platform is used
• ●ESD and corporate partners: aggregated or anonymised impact data only, unless you have provided explicit consent for identified reporting
• ●Law enforcement or regulatory bodies: where required by law

7. Your rights under POPIA

You have the following rights regarding your personal information:

• ●Right to access: you may request a copy of the personal information we hold about you
• ●Right to correction: you may request that we correct inaccurate or incomplete information
• ●Right to deletion: you may request that we delete your personal information, subject to legal retention requirements
• ●Right to object: you may object to processing based on legitimate interest, including for direct marketing
• ●Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
• ●Right to complain: you may lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at info@entrepreneurgenie.africa. We will respond within 30 days.

8. Cookies and tracking

We use cookies and similar technologies to operate our website. For full details of what we track and how to manage your preferences, see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. Our database uses row-level security to ensure each user can only access their own data. Payment processing is handled entirely by certified third-party processors and no card data passes through or is stored on our servers.

10. Changes to this policy

We may update this policy from time to time. We will notify active programme participants of material changes by email. Continued use of our platform after changes constitutes acceptance of the updated policy.

11. Contact

For all privacy-related queries, contact our Information Officer at info@entrepreneurgenie.africa.

The Information Regulator of South Africa can be contacted at: inforegulator.org.za