Privacy Policy

This Privacy Policy explains how we collect, use, share and protect your personal information, and your rights, under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

RESPONSIBLE PARTY & INFORMATION OFFICER — POPIA section 18 details

Responsible party: Armour Foundation Schools

Our Addresses:

  • Tanganani: 97 Ridge Road, Diepsloot, Johannesburg, Gauteng, 2069
  • Thembisa: 303 Castle Block, Vusimuzi, Thembisa, 1632

    • Website: https://www.armourfoundation.co.za/

    Information Officer: Ben Kasambara Masango

    Information Officer email: privacy@armourfoundation.co.za

    Information Officer phone: +27 79 057 3169 / +27 82 851 6938

    Effective date of this policy: 30 September 2026

    1. INTRODUCTION

    1.1 We, Armour Foundation Schools (“we”, “us” or “our”), are the responsible party for the personal information described in this policy and are committed to protecting your privacy and processing your personal information lawfully under POPIA.

    1.2 This privacy policy applies to personal information we collect through our website at https://www.armourfoundation.co.za/ (the “Website”), including information submitted through our online enquiry forms, as well as personal information processed by Armour Foundation Schools in the course of providing its educational and related services. This policy should be read together with our Website Terms of Service at https://www.armourfoundation.co.za/terms-of-service

    1.3 In this policy, “personal information”, “processing”, “data subject”, “responsible party” and “operator” have the meanings given to them in POPIA.

    2. WHAT WE TELL YOU WHEN WE COLLECT YOUR INFORMATION (POPIA section 18)

    2.1 When we collect your personal information, POPIA requires us to make you aware of the following, which (together with the details on the first page) we set out here:

    (a) the personal information we collect and, where we do not collect it directly from you, the source from which it was obtained;

    (b) our name and address, as the responsible party (see the first page);

    (c) the purpose for which we collect the information (see clause 4);

    (d) whether providing the information is voluntary or mandatory;

    (e) the consequences of not providing the personal information, including that we may be unable to respond to your enquiry or provide you with relevant admissions or registration information;

    (f) any law that requires or authorises the collection, where applicable;

    (g) whether the personal information may be transferred to or processed in another country and, where applicable, the safeguards or legal basis applicable to such transfer, as described in clause 10; and

    (h) your rights in relation to your personal information, including your rights to request access to and correction of your personal information, to object to certain processing, to withdraw consent where processing is based on consent, and to lodge a complaint with the Information Regulator, as described in clauses 6 and 10.

    3. INFORMATION WE COLLECT

    3.1 Information that does not directly identify you. When you visit the Website, we may collect technical information such as your IP address, operating system, browser type, device information, internet service provider and technical log information. This information may be used for website operation, security, troubleshooting and performance purposes. Where such information can reasonably be linked to an identifiable person, we will treat it as personal information in accordance with POPIA.

    3.2 Personal information you give us. We collect and process personal information that you voluntarily provide to us when you use the Website or communicate with Armour Foundation Schools, including when you:

    (a) submit an enquiry through a form on the Website;

    (b) report a problem or correspond with us;

    (c) contact us by email, telephone or other communication channels;

    (d) request information about admissions, registration, grades or other school-related matters; or

    (e) use the Website (including traffic, location and log data and the resources you access).

    3.2.1 Information submitted through the Website's enquiry form may include:

    a) your name;

    b) your surname;

    c) your telephone or mobile number;

    d) your email address;

    e) the child's date of birth;

    f) the grade interested in; and

    g) the details of your enquiry or message.

    3.3 Third-party service providers. We may use third-party service providers to support the operation, security, hosting, infrastructure, form processing, email communication and other technical functions of the Website. These providers may include:

    (a) Cloudflare Workers & Pages, which provides cloud computing, website hosting and related infrastructure services;

    (b) Railway, which provides database hosting and application deployment services;

    (c) Resend, which provides email delivery and communication services, including the delivery of enquiry-related emails;

    (d) Google Fonts, which provides fonts used on the Website;

    (e) Google Site Search, which may be used to provide search functionality and improve access to content on the Website; and

    (f) Cloudflare Turnstile, which provides security and bot-detection functionality for the Website's enquiry form;

    Depending on the service involved, these providers may process technical information, usage information or personal information on our behalf or as part of providing their services. Where a provider processes personal information on our behalf, we will take reasonably practicable steps to ensure that the processing is carried out only for authorised purposes and that appropriate confidentiality and security measures are in place. The use of these services may also involve the processing or transfer of information outside South Africa, where applicable, as described in clause 10.

    3.4 Special personal information and children. Armour Foundation Schools may process personal information relating to children where this is necessary for legitimate school-related purposes and is permitted by POPIA or another applicable law. For example, the Website's enquiry form may request a child's date of birth and the grade in which the child is interested so that Armour Foundation Schools can respond to an enquiry and provide relevant admissions or registration information. Where personal information relating to a child is provided to us, we will take appropriate steps to process and protect that information in accordance with POPIA and other applicable laws. A parent, guardian or other person submitting information about a child should only provide such information where they are authorised to do so. We do not intentionally request special personal information through the Website unless there is a lawful basis for collecting and processing such information.

    4. HOW AND WHY WE USE YOUR INFORMATION

    4.1 We use your personal information to:

    (a) operate, maintain and provide the Website and its functionality;

    (b) respond to enquiries, requests for information and other communications submitted through the Website or provided to us;

    (c) communicate with parents, guardians and prospective learners where follow-up is necessary in relation to an enquiry, admissions or registration;

    (d) provide information relating to the school's admissions, registration, academic programmes and other school-related services where requested;

    (e) maintain the security, reliability and functionality of the Website, including detecting and preventing fraudulent, abusive or automated activity;

    (f) comply with applicable legal and regulatory obligations and to protect the rights, property and security of Armour Foundation School, its learners, parents, guardians, staff and Website users.

    4.2 Lawful basis. We process personal information only where permitted by POPIA and other applicable laws. Depending on the circumstances, this may include processing that is necessary to respond to a request or enquiry, to take steps at the request of a data subject before entering into a contract, to perform or administer an existing relationship with the school, to comply with a legal obligation, where consent has been obtained, or where another lawful ground for processing under POPIA applies.

    5. OUR COMMITMENT — THE EIGHT POPIA CONDITIONS

    5.1 We process personal information in line with the eight conditions for lawful processing in POPIA:

    (a) Accountability — we take responsibility for complying with POPIA;

    (b) Processing limitation — we process information lawfully, minimally, and with your consent or another lawful basis;

    (c) Purpose specification — we collect it for a specific, defined purpose;

    (d) Further-processing limitation — we use it only for purposes compatible with that original purpose;

    (e) Information quality — we take reasonable steps to keep it accurate and up to date;

    (f) Openness — we are transparent, through this policy, about what we do;

    (g) Security safeguards — we apply reasonable technical and organisational measures to protect it (clause 7); and

    (h) Data-subject participation — we honour your rights to access and correct your information (clause 6).

    6. YOUR RIGHTS (POPIA sections 23–25 and 11)

    6.1 Subject to POPIA, you have the right to:

    (a) ask us to confirm, free of charge, whether we hold personal information about you, and to request a copy or description of it (section 23);

    (b) ask us to correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained (section 24);

    (c) object, on reasonable grounds, to the processing of your personal information (section 11(3));

    (d) withdraw any consent you have given, without affecting processing that already took place; and

    (e) lodge a complaint with the Information Regulator (clause 10).

    6.2 To exercise these rights, contact our Information Officer (see the first page). Access requests are dealt with under the Promotion of Access to Information Act 2 of 2000 (PAIA) and may require the prescribed form and proof of identity.

    7. STORAGE, SECURITY AND RETENTION

    7.1 We take reasonable technical and organisational measures to protect your personal information against loss, damage and unauthorised access.

    7.2 The transmission of information over the internet is not completely secure. While we use reasonable measures to protect your information, we cannot guarantee its security, and any transmission is at your own risk.

    7.3 We keep personal information only for as long as is necessary for the purposes described in this policy, or as required by law, after which we securely delete or de-identify it. [Give a time-frame]

    7.4 If we become aware of a security compromise affecting your personal information, we will notify the Information Regulator and you as required by section 22 of POPIA.

    8. COOKIES AND SIMILAR TECHNOLOGIES

    8.1 The Website may use cookies and similar technologies, including technologies provided by third-party service providers, to support the operation, security and functionality of the Website and to help us understand how the Website is used.

    8.2 Depending on the services and features used on the Website, cookies or similar technologies may be associated with services such as Cloudflare, Cloudflare Turnstile and Google services. These technologies may be used for purposes such as security, bot detection, website functionality, search functionality and the delivery of Website content.

    8.3 Third-party providers may set or access cookies or similar technologies in connection with their services. These providers operate their own systems and may have their own privacy and cookie practices. Where applicable, further information about these practices is available in the relevant provider's privacy documentation.

    8.4 You can generally control or restrict cookies through your web browser settings. However, disabling certain cookies or similar technologies may affect the availability or functionality of some Website features.

    9. WHEN WE SHARE YOUR INFORMATION

    9.1 We may share personal information with service providers or operators who process information on our behalf where this is necessary to operate, secure, maintain or provide the Website and its related services. These providers may include hosting, infrastructure, database, security, form-processing and email service providers. Where an operator processes personal information on our behalf, we will take reasonably practicable steps to ensure that appropriate confidentiality and security measures are in place and that the information is processed only for authorised purposes.

    9.2 We may disclose personal information where the law requires it — for example to comply with a court order, subpoena or lawful request — or where reasonably necessary to enforce our terms, protect our rights, or protect the safety of any person.

    9.3 The Website may contain links to third-party websites, platforms or services. These third parties have their own privacy policies and terms, and we are not responsible for their privacy practices or the content of their websites. We recommend that you review the applicable privacy policies before providing personal information to third parties.

    9.4 If Armour Foundation Schools undergoes a change in ownership, legal structure or control, or if its operations or relevant assets are transferred to another entity, personal information may be transferred as part of that process where legally permitted. Any recipient of such personal information will be required to handle it in accordance with POPIA and other applicable laws.

    10. CROSS-BORDER TRANSFERS AND CONTACT

    10.1 Cross-border transfers (POPIA section 72). Sometimes your personal information is stored or processed outside South Africa (for example by a cloud provider abroad). We do this only where section 72 of POPIA allows it — that is, where one of the following applies:

    (a) the recipient is subject to a law, binding corporate rules or a binding agreement that gives your information an adequate level of protection;

    (b) you have consented to the transfer;

    (c) the transfer is necessary to perform our contract with you; or

    (d) the transfer is for your benefit and it is not reasonably practical to get your consent.

    10.2 Privacy requests and enquiries. If you have questions about this Privacy Policy or how we process your personal information, or if you wish to exercise your rights to access, correct, update or request the deletion of your personal information, you may contact our privacy team at privacy@armourfoundation.co.za. We may request appropriate information to verify your identity before processing a request.

    10.3 Information Regulator. You have the right to lodge a complaint with the Information Regulator of South Africa if you believe that your personal information has been processed in contravention of POPIA. The Information Regulator provides facilities for submitting POPIA complaints through its eServices platform. Its current general contact details include 010 023 5200 and enquiries@inforegulator.org.za.

    10.4 Changes and contact. We may update this Privacy Policy from time to time. Where we make material changes, we will publish the updated policy on the Website and update the effective date where appropriate.