POPIA & GDPR Compliance

Privacy Policy

Last Updated: March 2026

1. Introduction

Wellness Dynamix ("we," "us," or "our") is committed to protecting your privacy. This policy outlines how we collect, use, and protect your data in accordance with the South African Protection of Personal Information Act (POPIA) and the EU General Data Protection Regulation (GDPR).

2. Information We Collect

When you register for training, we collect:

  • Full Name and Professional Designation.
  • Contact Information (Email, Phone number).
  • Employer details and Province.
  • SA ID Number: Required solely for the purpose of issuing accredited certificates of completion.

3. Storage & US-Central Transfer

In accordance with POPIA Section 72, we disclose that your data is stored using Firebase (Google Cloud) on secure servers located in the United States (US-Central). Google Cloud implements high-level encryption both at rest and during transit.

4. Data Retention

To comply with accreditation and auditing standards, we retain your training records and certification data for a period of 5 years. After this period, personal data that is no longer necessary for legal or operational requirements will be securely deleted or de-identified.

5. Data Breach Notification

In the unlikely event of a data breach, we will notify the Information Regulator and all affected users as soon as reasonably possible, typically within 72 hours, as required by Section 22 of POPIA.

6. Your Rights

  • Access: Request a copy of the data we hold.
  • Correction: Request updates to incorrect info.
  • Deletion: Request that we delete your personal data.
  • Marketing: You may opt-out of newsletters at any time.

Registered Information Officer

Dewald van Tonder

Email: dewaldvantonder2@gmail.com

Location: Centurion, South Africa