Privacy notice

1. Who processes your information

Attest is the responsible party for the personal information described here. The registered trading entity and its address will be published here before paid subscriptions open.

The owner of Attest acts as the Information Officer. Contact the Information Officer at support@attestprep.co.za.

2. What we collect

Your email address and password, which you give us when you create an account. Passwords are stored hashed by our authentication provider and are never visible to us.

Your activity on the platform: the practice sessions and exams you start, the questions dealt to you, the options you select, whether each answer was correct, your scores and the times involved.

Basic technical information your browser sends when you use the site, such as your device type, and the cookie that keeps you logged in and remembers which exam you selected.

We do not collect identity numbers, addresses, payment card details or any special personal information as defined in POPIA. When paid subscriptions open, card details will be handled by the payment provider and will not be stored by us.

3. Why we process it, and on what basis

To give you the service you asked for: authenticating you, dealing you questions, marking your answers, and showing you your own history and weak sections. The lawful basis is performance of our agreement with you.

To keep the platform working and secure, including preventing account sharing and bulk extraction of our question bank. The lawful basis is our legitimate interest in protecting the service.

To send you service messages such as sign-up confirmation and password resets. We do not send marketing email without your agreement.

4. Who we share it with

Supabase, which hosts our database and runs authentication. Vercel, which hosts and serves the website. Resend, which delivers our transactional email. Each processes personal information on our instructions as an operator.

These providers may process or store information outside South Africa. Where that happens we rely on their contractual data protection commitments, as POPIA section 72 requires.

We do not sell your personal information, and we do not share it with advertisers.

5. How long we keep it

We keep your account and your attempt history for as long as your account is open, because your history is the product: it is what shows you your progress over time.

If you ask us to delete your account, we delete it and its attempt history, except anything we are required to keep by law.

6. Your rights

You may ask us what personal information we hold about you, ask us to correct or delete it, object to processing, and ask for a copy of it.

To exercise any of these, contact support@attestprep.co.za. We will respond as soon as we reasonably can.

If you are not satisfied with how we have handled your information, you may complain to the Information Regulator of South Africa.

7. Security

Access to your data is restricted at the database level, so one user's attempts and answers cannot be read by another. Correct answers and explanations are withheld from the browser entirely.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.