Aviation Courseware
Terms of ServicePrivacy PolicySign In

Privacy Policy

Last updated: 24 March 2026

1. Introduction

Aviation Courseware (“we”, “us”, or “our”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our online learning platform (“Platform”) at aviationcourseware.co.za and lms.aviationcourseware.co.za.

2. Information We Collect

2.1 Information you provide

  • Account registration: Full name, email address, and password.
  • Activation code redemption: The code itself and the associated product.
  • Online purchases: Name, email, and payment details (processed by our payment provider; we do not store card details).
  • Support enquiries: Any information you provide when contacting us.

2.2 Information collected automatically

  • Authentication data: Login timestamps, session identifiers, 2FA status, and trusted device information.
  • Usage data: Lesson progress, course completion status, time spent on lessons, and playback error reports.
  • Device and browser data: IP address, browser type, operating system, and device identifiers for session management and security.
  • Audit logs: Records of account actions such as login, code redemption, entitlement changes, and disclaimer acceptance.

3. Purpose of Processing

We process your personal information for the following purposes:

  • Account management: To create and manage your account, verify your identity, and enforce security measures including 2FA and single-session controls.
  • Service delivery: To grant access to purchased content, track your learning progress, and deliver course materials.
  • Entitlement management: To validate activation codes, manage product access, and process online purchases.
  • Security and fraud prevention: To detect and prevent unauthorised access, credential sharing, and abuse of the Platform.
  • Communication: To send transactional emails including account verification, password resets, and welcome messages.
  • Legal compliance: To comply with applicable laws and respond to lawful requests from authorities.
  • Platform improvement: To analyse usage patterns and improve the Platform experience.

4. Legal Basis for Processing

We process your personal information on the following bases under POPIA:

  • Consent: You consent to our processing of your information when you register and accept our Terms of Service and Disclaimer.
  • Contractual necessity: Processing is necessary to provide you with the services you have purchased or activated.
  • Legitimate interest: Processing is necessary for security, fraud prevention, and improving the Platform.
  • Legal obligation: Processing is required to comply with applicable laws.

5. Data Sharing

We do not sell your personal information. We may share your information with:

  • Service providers: Third-party services that help us operate the Platform, including Supabase (database and authentication), Vercel (hosting), and Resend (transactional email). These providers process data on our behalf under appropriate agreements.
  • Payment processors: When you make an online purchase, your payment details are processed by our payment provider. We do not store your card information.
  • Legal requirements: We may disclose information if required by law, court order, or regulatory authority.

6. Data Storage and Security

  • Your data is stored on secure cloud infrastructure provided by Supabase and Vercel.
  • Data may be processed in data centres outside South Africa, subject to appropriate safeguards.
  • We implement industry-standard security measures including encryption in transit (TLS), encrypted passwords, Row-Level Security (RLS) on database tables, mandatory 2FA, and session controls.
  • Protected content (e-books and software) is served through authenticated API routes and cannot be accessed without valid credentials and entitlements.

7. Data Retention

  • Account data: Retained for as long as your account is active. Upon account deletion, personal data is removed, though anonymised audit records may be retained for compliance.
  • Usage and progress data: Retained for the duration of your account to provide continuous access to your learning history.
  • Audit logs: Retained for a minimum of 3 years for security and compliance purposes.
  • Transaction records: Retained as required by applicable tax and commercial legislation.

8. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

  • Access: Request confirmation of whether we hold your personal information and request a copy of it.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Object: Object to the processing of your personal information on reasonable grounds.
  • Withdraw consent: Withdraw your consent to processing at any time, noting that this may affect your ability to use the Platform.
  • Complaint: Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed.

To exercise any of these rights, please contact us at info@aviationcourseware.co.za.

9. Cookies and Tracking

The Platform uses essential cookies and local storage for authentication, session management, and user preferences. We do not use third-party advertising or tracking cookies. Analytics, if enabled, are privacy-respecting and do not track individual users across websites.

10. Children’s Privacy

The Platform is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without appropriate consent, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

12. Information Officer

For all privacy-related enquiries or to exercise your rights under POPIA, please contact our Information Officer:

13. Information Regulator

If you are not satisfied with our response to a privacy concern, you may lodge a complaint with:

The Information Regulator (South Africa)
Email: complaints.IR@justice.gov.za
Website: inforegulator.org.za