GISP Privacy Policy & POPIA Compliance

The Global Institute for Social Protection (GISP) is committed to protecting your personal information in compliance with the Protection of Personal Information Act (POPIA), 2013 and the Health and Welfare Sector Education and Training Authority (HWSETA) reporting requirements.

By using this Learning Management System, you consent to the collection, processing, and storage of your personal data for the purposes of:

  • Administering your enrolment and learning activities
  • Tracking course progress and issuing certificates
  • Submitting learner data to HWSETA and the Quality Council for Trades and Occupations (QCTO) as required by law
  • Communicating important programme updates

Please read the full policy below for complete details on how your data is handled, your rights, and how to contact us.

GISP Learning Portal — Privacy Policy & POPIA Compliance

Effective Date: 10 March 2026  |  Version: 2.0
Information Officer: Mr S. Jehoma  |  selwyn@gisp.org.za  |  084 515 4592

1. Who We Are

The Global Institute for Social Protection (GISP) is a South African registered non-profit company (NPO) based in Cape Town, dedicated to enhancing access to social protection through training and skills development programmes. GISP is a registered Skills Development Provider (SDP) operating under the QCTO qualification framework and HWSETA oversight.

This Privacy Policy governs the collection, processing, storage, and protection of personal information on the GISP Learning Portal (lms-dev.gisp.org.za), in compliance with the Protection of Personal Information Act, 2013 (POPI Act, Act No. 4 of 2013).

2. Lawful Basis for Processing (POPIA Section 11)

  • Contractual necessity: to enrol you in and administer GISP training programmes
  • Legal obligation: to comply with HWSETA, QCTO, and SAQA reporting requirements
  • Legitimate interest: to manage the LMS, issue certificates, and improve programme delivery
  • Consent: where you have given explicit consent for specific processing activities

3. Information We Collect

Identification & Contact: Full name, email, phone, address, SA ID or passport number.

Demographic (HWSETA/SETA reporting): Race, gender, disability status, province, employment status, employer name.

Professional & Academic: Highest qualification, field of study, institution, completion year, job title, years of experience.

Learning Activity Data: Enrolment dates, assessment scores, quiz attempts, assignment submissions, completion dates, login times, activity participation, certificate records.

Technical: IP address, browser type, device information, session cookies.

4. How We Use Your Information

  • Register and enrol you in GISP training programmes
  • Administer qualifications, assessments, and certifications
  • Generate HWSETA-required learner performance and demographic reports
  • Issue Portfolio of Evidence (POE) records and completion certificates
  • Communicate programme updates, assessment deadlines, and notifications
  • Comply with QCTO, HWSETA, SAQA, and other regulatory requirements

5. How We Protect Your Information

GISP implements role-based access controls, encrypted data transmission (HTTPS/TLS), regular system backups and security audits, and staff training on data protection obligations.

6. Sharing Your Information

GISP does not sell your personal data. We may share with: HWSETA and QCTO (statutory reporting); SAQA (NLRD submissions); payment processors; IT service providers under confidentiality agreements; and accredited assessors and moderators for quality assurance purposes.

7. Your Rights Under POPIA (Section 5)

  • Be notified that your personal information is being collected (Section 18)
  • Access your personal information held by GISP (Section 23)
  • Request correction or deletion of inaccurate information (Section 24)
  • Object to the processing of your personal information (Section 11(3))
  • Withdraw consent at any time
  • Lodge a complaint with the Information Regulator of South Africa

Contact: Mr S. Jehoma — selwyn@gisp.org.za — 084 515 4592

8. Information Regulator

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: inforeg@justice.gov.za  |  Website: www.justice.gov.za/inforeg/

9. Data Retention

  • Active learner records: duration of enrolment + 5 years
  • Completion and certification records: 7 years (SETA requirements)
  • Financial records: 5 years (tax legislation)
  • Technical/system logs: 12 months

10. Cookies

The GISP Learning Portal uses session cookies for essential functionality only. No third-party advertising cookies are used. You may manage cookies in your browser settings.

11. Third-Party Links

The portal may link to gisp.org.za and other external sites. GISP is not responsible for their privacy practices.

12. Policy Updates

This policy may be updated periodically. Registered learners will be notified of material changes via the Learning Portal.

13. Contact Us

Information Officer: Mr S. Jehoma
selwyn@gisp.org.za  |  084 515 4592
https://gisp.org.za/contact-us/
https://lms-dev.gisp.org.za

I agree to the GISP Privacy Policy & POPIA Compliance.
Back to top