Privacy Policy

Last updated: 10 August 2026

Upskill Lab ("we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have. It is written to align with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.

By using our website at www.upskilllab.co.za or by submitting information to us, you agree to the practices described in this policy. If you do not agree with this policy, please do not use our website or submit your information to us.

Who we are

Upskill Lab is a beauty education academy based in Bellville, Western Cape, South Africa. For the purposes of POPIA, Upskill Lab is the Responsible Party that determines how and why your personal information is processed.

Our contact details are set out at the end of this policy.

What personal information we collect

We may collect and process the following categories of personal information:

Information you give us directly. When you complete our contact form, course enquiry, or career assessment, we may collect your name, email address, phone number, the course or courses you are interested in, and any message or details you choose to share with us.
Enrolment and student information. If you enrol in a course, we may collect additional information needed to register and support you as a student, such as your identity or date of birth details, address, emergency contact, payment information, and records relating to your training and assessments.
Career assessment responses. When you use our online assessment, we process the answers you provide and, if you choose to share it, your name. This is used to give you a course recommendation. If you do not submit an enquiry, these responses are not stored by us and remain in your browser only.
Technical and usage information. Like most websites, we may automatically collect limited technical information such as your device type, browser, approximate location, and how you interact with our site, usually through cookies and similar technologies.

You are not obliged to provide personal information to us. However, if you choose not to, we may not be able to respond to your enquiry, process your enrolment, or provide certain services.

How we collect your information

We collect personal information:

Directly from you, when you complete a form, use our assessment, contact us by email, phone or WhatsApp, or enrol in a course.
Automatically, through cookies and similar technologies when you browse our website.
Occasionally from third parties where you have consented or where permitted by law, for example accreditation or examination bodies relevant to your qualification.

Why we process your information

We process your personal information for the following purposes:

To respond to your enquiries and provide the information you request.
To provide you with a personalised course recommendation through our assessment.
To process your course enrolment and administer your training, assessments and results.
To communicate with you about your enquiry, your course, intake dates, and related administrative matters.
To process payments and keep the records required for our operations.
To comply with our legal, accreditation and regulatory obligations.
Where you have consented, to send you marketing about our courses, offers and news. You may withdraw this consent at any time.
To improve our website, services and the experience we offer.

The legal basis for processing

We only process your personal information where we have a lawful basis to do so under POPIA. Depending on the situation, this may be your consent, the performance of a contract with you (such as your enrolment), compliance with a legal obligation, or our legitimate interests in running and improving our academy in a way that does not override your rights.

Marketing communications

We will only send you direct marketing where you have agreed to receive it, or where otherwise permitted by law. Every marketing message will give you a clear way to opt out. You can also ask us to stop sending you marketing at any time by contacting us using the details below.

Who we share your information with

We do not sell your personal information. We may share it with:

Service providers who help us operate, such as our website host, email and communication providers, payment processors, and form or CRM tools. These providers process information on our behalf and are required to keep it secure.
Accreditation and examination bodies where necessary to register you, administer your assessments, or issue your qualification.
Our partners where relevant to a service you have requested, such as a partner academy for a course we do not offer directly. We will make it clear when this applies.
Authorities or third parties where we are required to do so by law, or to protect our rights, safety or property.

Cross border transfers

Some of our service providers may store or process information outside South Africa. Where this happens, we take reasonable steps to ensure your information receives a level of protection consistent with POPIA.

How long we keep your information

We keep your personal information only for as long as necessary for the purposes described in this policy, or for as long as required by law, accreditation rules, or our legitimate business needs. Student and financial records are generally kept for longer periods where the law requires it. When we no longer need your information, we will delete or de-identify it securely.

How we protect your information

We take reasonable and appropriate technical and organisational measures to protect your personal information against loss, unauthorised access, and misuse. While we work hard to safeguard your information, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Cookies

Our website may use cookies and similar technologies to help it function, remember your preferences, and understand how the site is used. You can control or disable cookies through your browser settings, although some parts of the site may not work properly if you do.

Your rights

Under POPIA, you have the right to:

Ask us what personal information we hold about you and request access to it.
Ask us to correct or update information that is inaccurate, out of date, or incomplete.
Ask us to delete information where we are no longer entitled to keep it.
Object to the processing of your information in certain circumstances.
Withdraw your consent, where our processing is based on consent, without affecting processing that has already taken place.
Lodge a complaint with the Information Regulator (see below).

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before acting on your request.

Children

Some of our courses are open to students from the age of 16. Where we knowingly collect the personal information of a person under 18, we do so in a manner consistent with POPIA and, where required, with the consent of a parent or guardian. If you believe we have collected information about a minor without appropriate consent, please contact us so we can address it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The latest version will always be available on this page, with the "last updated" date at the top. We encourage you to review it periodically.

How to contact us

If you have any questions about this policy, wish to exercise your rights, or want to make a complaint about how we handle your information, please contact us:

Upskill Lab
First Floor, Tyger Terraces 2, 2 DJ Wood Street, Bellville
Email: info@upskilllab.co.za
WhatsApp: 082 699 9822

The Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to complain to the Information Regulator of South Africa:

The Information Regulator (South Africa)
Email: enquiries@inforegulator.org.za
Website: www.inforegulator.org.za