Privacy Policy

Online Bursaries Effective Date: 20 March 2026 (last updated)

At Online Bursaries (based in Johannesburg, Gauteng, South Africa), we are committed to protecting your privacy in line with the Protection of Personal Information Act, 4 of 2013 (POPIA) and other applicable laws. This Privacy Policy explains how we collect, process, store, share, and protect your personal information when you use our website, subscribe to our newsletter, or contact us.

1. Who We Are (Responsible Party)

We are the Responsible Party under POPIA: Online Bursaries Johannesburg, Gauteng, South Africa Email: [email protected]

2. Personal Information We Collect

We collect only what is necessary:

  • Directly from you: Name, email address, phone number (optional), educational background, province (when you subscribe to newsletters, fill forms, or inquire about bursaries).
  • Automatically: Usage data (IP address, browser type, pages visited, time spent) via cookies and analytics tools.
  • Cookies & Tracking: Necessary cookies for site function; optional analytics/ad cookies for improvements and relevant recommendations. See our Cookie Policy.

3. Lawful Basis for Processing (POPIA Section 11)

We process your information based on:

  • Your consent (e.g., newsletter signup, form submissions).
  • Legitimate interests (e.g., site analytics, security, improving bursary recommendations – balanced against your rights).
  • Contract performance (if you engage further services).
  • Legal obligations (e.g., responding to authorities).

4. How We Use Your Information (Purpose Specification – POPIA Condition 2)

  • Provide bursary listings, updates, and personalized recommendations.
  • Send newsletters/emails (you can unsubscribe anytime via the link in every email or by emailing us).
  • Improve site functionality, analyze trends, prevent fraud.
  • Comply with laws or protect our rights.

We do not use your data for unrelated marketing without your consent.

5. Sharing & Disclosure (Further Processing & Operators – POPIA Conditions 3 & 6)

We share your information only when necessary:

  • With service providers (e.g., email platform like Mailchimp, hosting company) under strict confidentiality agreements.
  • If required by law, court order, or public authorities.
  • With your explicit consent.

We never sell personal information.

6. Cross-Border Transfers

Data may be stored or processed in South Africa or by providers in other countries (e.g., US-based tools). We ensure adequate protections through contracts or binding corporate rules that comply with POPIA Section 72.

7. Data Security

We use reasonable technical and organizational measures (encryption, access controls, regular security updates) to protect against unauthorized access, loss, or breach. In the event of a data compromise, we will notify affected data subjects and the Information Regulator as required by POPIA Section 22.

8. Retention Period

We keep your data only as long as needed:

  • Newsletter subscribers: Until you unsubscribe + 12 months (for record-keeping).
  • Enquiry forms: Up to 24 months or as required by law.
  • Usage logs: 12–24 months for security and analytics purposes.

After that period, we delete or anonymize the data.

9. Your Rights as Data Subject (POPIA Chapter 3 & Section 5)

You have the right to:

  • Be informed about how your personal information is processed.
  • Access your personal information (free once per year; request in writing).
  • Request correction or deletion (subject to legal retention requirements).
  • Object to processing (e.g., for direct marketing).
  • Withdraw consent at any time (this does not affect processing that was lawful before withdrawal).
  • Lodge a complaint with the Information Regulator ([email protected]).

To exercise any of these rights, email us at [email protected]. We will respond within 30 days (extendable under POPIA rules). We may need to verify your identity before proceeding.

10. Children’s Privacy

Our site is not intended for children under 18 without parental or guardian consent. We do not knowingly collect personal information from minors under 18. If we discover such data has been collected, we will delete it immediately.

11. Third-Party Links, Bursary Providers, and External Content

The Site contains links to external websites of bursary providers, funders, universities, and other organisations. These links are provided for your convenience to access official application pages and verify details.

Online Bursaries is not responsible for the content, privacy practices, data collection, or accuracy of information on these external sites. We encourage you to review their privacy policies and terms before submitting any personal information or applications.

Bursary listings on our Site are independently compiled and paraphrased from public sources to help South African students find opportunities. We do not collect or process application data on behalf of providers — any personal information you share is directly with the official provider via their site.

11.1 Trademarks and Branding

References to third-party trademarks, logos, or brand names are for informational purposes only and do not indicate any affiliation, partnership, or endorsement.”

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a new effective date. Your continued use of the site after changes means you accept the updated policy.

13. Contact Us

For questions, rights requests, or complaints: Email: [email protected] Use our Contact Form: https://onlinebursaries.co.za/contact/

This policy is fully compliant with POPIA’s 8 Conditions for Lawful Processing of Personal Information. For the full text of the Act, visit popia.co.za.