Privacy, Security & POPIA Compliance

At Kaleidoscope Human Resources (Pty) Ltd, protecting personal information is fundamental to the way we deliver our assessment, learning and workforce development solutions.

Our clients trust us with information that helps them make important decisions about recruitment, development and workforce capability. Learners trust us with their personal details, assessment results and learning progress. We take that responsibility seriously.

We are committed to processing personal information lawfully, transparently and securely in accordance with South Africa’s Protection of Personal Information Act (POPIA).

Our goal is simple: to help organisations make better decisions while protecting the privacy, dignity and rights of every individual whose information we process.

Our Commitment

We believe assessment and learning data belongs to the learner and the organisation that commissioned the service.

Kaleidoprax acts as a trusted custodian of that information. We never sell personal information or use assessment or learning data for unrelated commercial purposes.

We collect only the information required to deliver our services, improve learning outcomes and meet our contractual and legal obligations.

Information We Collect

Depending on the services provided, we may collect information including:

Personal Information
  • Full name
  • Email address
  • Telephone number
  • Identification number (where required)
  • Employer or organisation
Demographic Information

Where required for reporting or research purposes, we may collect demographic information such as age, gender, language or other information supplied with the individual’s consent.

Assessment & Learning Information
  • Assessment responses
  • Assessment scores and reports
  • English proficiency results
  • Learning progress
  • Course completion history
  • Certificates achieved
Technical Information

To maintain security and improve our services we may collect:

  • Login history
  • Browser and device information
  • IP address
  • System activity logs

Why We Collect Information

Personal information is collected only for legitimate business purposes, including:

  • Delivering assessments
  • Placing learners into appropriate learning programmes
  • Providing assessment reports
  • Supporting clients and learners
  • Tracking learning progress
  • Issuing certificates
  • Improving our products and services
  • Meeting contractual obligations
  • Complying with applicable legislation

We do not use personal information for purposes unrelated to the services requested.

How long we retain your data

Protecting personal information requires both technology and good governance.

Our security measures include:

  • Secure hosting within South Africa
  • Encrypted communication between users and our platform
  • Role-based access controls that restrict access to authorised users only
  • Password-protected user accounts
  • Security monitoring and audit logging
  • Regular software maintenance and security updates
  • Secure backup and disaster recovery procedures
  • Internal policies governing the handling of confidential information

Access to personal information is limited to authorised personnel who require it to perform their responsibilities.

POPIA Compliance

Kaleidoscope Human Resources (Pty) Ltd processes personal information in accordance with the principles of the Protection of Personal Information Act (POPIA).

Accountability

We take responsibility for protecting the personal information entrusted to us.

Processing Limitation

We collect only information that is necessary for the services we provide and process it lawfully and fairly.

Purpose Specification

We explain why information is collected and use it only for those stated purposes.

Further Processing

We do not use personal information for unrelated purposes without an appropriate legal basis or consent where required.

Information Quality

We encourage clients and users to keep their information accurate and up to date.

Openness

We are transparent about the information we collect, how it is used and how it is protected.

Security Safeguards

We implement appropriate technical and organisational measures to protect information against unauthorised access, loss, misuse or disclosure.

Data Subject Participation

Individuals may request access to, correction of or deletion of their personal information, subject to applicable legal and contractual requirements.

Data Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected.

Unless otherwise required by law or contract, Kaleidoprax retains personal information for five years.

At the end of the retention period, information is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Client Responsibilities

Authorised client administrators may access and download reports through the Kaleidoprax Platform.

Once reports have been downloaded to a client’s own systems or devices, responsibility for protecting that information rests with the client and its authorised users.

We encourage all clients to maintain appropriate security controls when storing or sharing downloaded reports.

Cookies and Website Analytics

Our website uses cookies and analytics technologies to improve user experience and understand how our services are used.

These technologies may include:

  • Google Analytics
  • Zoho services

Information collected through analytics is used to improve website performance, user experience and service delivery. Where appropriate, users may manage cookie preferences through their browser settings.

Your Rights

Under POPIA, you have the right to:

  • Request access to your personal information
  • Request correction of inaccurate information
  • Request deletion of information where legally permissible
  • Withdraw consent where processing is based on consent
  • Object to certain types of processing where provided for by law
  • Lodge a complaint with the Information Regulator of South Africa

Contact

For questions relating to privacy, security or the processing of personal information, please contact:

Information Officer

Zerelde Swanepoel | Managing Director | Kaleidoscope Human Resources (Pty) Ltd

Email: info@kaleidoprax.co.za