1. Who we are
Mafaku Consulting Services (Pty) Ltd (registration number 2013/225672/07) is a SETA-accredited skills development provider based in Gauteng, South Africa. In this notice, “Mafaku”, “we” and “us” mean Mafaku Consulting Services (Pty) Ltd. We are the responsible party for the personal information described here.
This notice applies to information we collect through this website (www.mafaku.com), by email, phone and WhatsApp, and when we deliver training, learnerships, coaching, profiling, team building and catering services.
2. What personal information we collect
When you contact us
- Your name, company, email address and phone number.
- The programme you are interested in, the number of delegates and anything you write in your message.
When you or your employees attend our programmes
- Identity and contact details, such as full name, ID or passport number, date of birth, address, email and phone number.
- Employer, job title, highest qualification and education history.
- Attendance registers, assessments, portfolios of evidence, results and certificates.
- Information that SETAs, the QCTO or B-BBEE and employment equity reporting require, which may include race, gender and disability status. This is special personal information. We only process it where the law requires or allows it, or with your consent.
- For coaching and Five Lens Enneagram profiling: your questionnaire responses, profile reports and session notes. We treat these as confidential.
- Dietary requirements, where you tell us about them for catering at an event.
When you visit this website
- Technical information our hosting provider records automatically, such as your IP address, browser type, the pages requested and the date and time. These logs are used to run and secure the website.
- Your cookie choice, saved in your browser (see section 9).
We collect most information directly from you. Sometimes your employer, or the organisation that pays for your training, gives it to us when they register you for a programme.
3. How we use your information
We use personal information only for purposes that are lawful and connected to our services:
- To answer your enquiry and send you a proposal or quote.
- To register, train, assess and certify learners, and to issue certificates.
- To report to SETAs, the QCTO and other authorities as legally required, including for learnerships and skills development grants.
- To deliver coaching, profiling and team-building sessions you or your organisation have booked.
- To invoice, keep accounting records and meet tax and other legal obligations.
- To keep this website working, secure and protected against misuse.
- To send you news about our programmes, but only if you are an existing client, or you have agreed to receive it. You can opt out at any time.
We process information because you consent, because we need it to provide a service you or your employer asked for, because the law requires it, or because it is in our legitimate interest, such as keeping the website secure.
5. Information sent outside South Africa
Some of our service providers store or process information outside South Africa. For example, our website host and our form-delivery service operate from the United States and other countries. We only use providers that are bound by data protection laws, agreements or binding rules that give your information protection substantially similar to POPIA, as section 72 of POPIA requires.
6. Keeping your information safe
We take reasonable technical and organisational steps to protect personal information against loss, misuse and unauthorised access. These include encrypted connections (HTTPS) on this website, access limited to people who need it, secure storage of learner files and portfolios, and confidentiality undertakings from our facilitators and assessors.
If we believe your personal information has been accessed by someone without authority, we will notify you and the Information Regulator as POPIA requires.
7. How long we keep it
- Enquiries that do not lead to work: up to two years after our last contact.
- Learner, assessment and certification records: for as long as the relevant SETA, the QCTO and our accreditation require.
- Financial and tax records: for at least five years, as tax and company law require.
- Coaching and profiling notes: for the duration of the engagement and a reasonable period afterwards.
After that we delete or destroy the information, or de-identify it so it no longer identifies you.
8. Your rights
Under POPIA you have the right to:
- Ask whether we hold personal information about you, and request a copy of it.
- Ask us to correct information that is wrong, or to delete information we are no longer allowed to keep.
- Object to us processing your information, including for direct marketing.
- Withdraw your consent at any time, where we rely on consent.
- Complain to the Information Regulator if you believe we have not handled your information properly.
To use any of these rights, contact our Information Officer (section 12). We may need to confirm your identity before we act on a request. Requests for copies of records are handled under the Promotion of Access to Information Act (PAIA).
10. Children
This website is meant for adults and organisations. Where we run programmes for learners under 18, we process their personal information only with the consent of a parent or guardian, or where the law allows it, and only for the purpose of the programme.
11. Changes to this notice
We may update this notice from time to time. The latest version will always be on this page, with the date it took effect. If we make a significant change, such as adding analytics cookies, we will ask for your cookie choice again.
12. Contact us
For any question about this notice or your personal information, contact our Information Officer: