Protection of Personal Information Act 4 of 2013
Effective date: 1 June 2026 · Last updated: 27 May 2026
| Organisation | WarinHari Learn NPC |
| Registration | Non-profit company, South Africa |
| Information Officer | To be registered with the Information Regulator |
| Contact | privacy@warinhari.online |
| Platform | Destiny Workshop (workshop.warinhari.online) |
We process your personal information on the following lawful grounds:
POPIA affords special protection to certain categories of information. Destiny Workshop collects information about your personality, values, strengths and emotional intelligence. While these are not medical records, they are sensitive in nature. We treat all such data as special personal information and apply our highest level of protection:
Under POPIA, you have the following rights. To exercise any of them, email privacy@warinhari.online with the subject line matching the right you are exercising.
| Right | What it means |
|---|---|
| Right of Access (s.23) | Request a copy of all personal information we hold about you |
| Right to Correction (s.24) | Request that inaccurate or incomplete information be corrected or updated |
| Right to Deletion (s.24) | Request deletion of your personal information (subject to legal retention obligations) |
| Right to Object (s.11(3)) | Object to processing based on legitimate interest — we will stop unless we have compelling grounds |
| Right to Restrict (s.22) | Request that we restrict how we use your data while a correction request is being resolved |
| Right to Complain (s.74) | Lodge a complaint directly with the Information Regulator of South Africa |
We will respond to rights requests within 30 days. Complex requests may be extended by a further 30 days with notice.
| Data category | Retention period |
|---|---|
| Workshop progress & AI content | For the lifetime of your account; deleted within 30 days of account deletion request |
| Payment records & invoices | 5 years (SARS requirement) |
| Email correspondence | 3 years |
| Security logs | 12 months |
| Anonymised aggregated data | Indefinitely (cannot be linked back to you) |
Your data may be processed outside South Africa by the following third-party services, each of which provides an adequate level of protection:
We ensure that cross-border transfers comply with POPIA s.72 by relying on recipient organisations that are bound by laws, binding corporate rules or contracts that uphold substantially similar principles to POPIA.
We implement the following technical and organisational measures to protect your information:
In the event of a personal information breach that poses a risk to you, we will notify you and the Information Regulator as required by POPIA s.22 — within 72 hours of becoming aware of the breach.
If you are not satisfied with our response to a data-subject rights request, or believe we are not complying with POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa:
To exercise your rights or ask any question about how we handle your personal information:
Please include your full name, the email address linked to your account, and a clear description of your request. We may ask for proof of identity before processing requests that grant access to personal information.