Your information

Privacy Notice

How Acts House of Education collects, uses and protects your personal information, and the choices you have.

Last updated:

This notice explains, in plain language, what personal information we collect through this website, why we collect it, who helps us process it, how long we keep it and what your rights are under South Africa's Protection of Personal Information Act (POPIA).

We only collect what we need, we don't sell personal information, and we don't use it for advertising.

Who we are

Acts House of Education (NPC Reg. No. 2015/425722/08), a school in Midrand, Gauteng, is responsible for the personal information described here. In POPIA's terms, we are the “responsible party”.

Information Officer: [Information Officer name and email to be confirmed]

General enquiries: send us a message or write to info@actshouse.com

Address: Allan Road, Glen Austin AH, Midrand, Gauteng 1685, South Africa

What we collect and why

You choose what to send us. Each form below asks only for what we need for that purpose, and we use the information only for that purpose.

Contact form (Get in touch)

What we collect
Your name, email address, phone number (optional), what your message is about (the category you choose), an optional subject and your message. We also record which page you sent it from, a short description of your browser, and a scrambled code made from your internet address. The code can't be turned back into the address; we never store the address itself.
Why
To read and answer your message, and to keep a record of the conversation. The scrambled code and browser description are used only to block spam and repeated submissions.

Ask & Grow anonymous questions

What we collect
Only the question you type. We don't ask for your name or email, and we don't store your internet address or anything else that identifies you with the question.
Why
So our team can answer it. Answers may be shared publicly, without saying who asked.

To stay anonymous, don't put your name or other personal details in the question itself.

School tour bookings

What we collect
Your first name and surname, email address and phone number, how many people are coming, and any notes you add. For some visits we also ask for your child's name and the grade you are interested in. As with the contact form, we keep a scrambled code made from your internet address, never the address itself.
Why
To manage your booking: confirming it, sending reminders, telling you about changes and preparing for your visit. We don't add you to mailing lists because you booked. If you tick the separate SMS box when you book (or tell our staff yes), we also send these booking updates by text message through RepletoryReach, to your mobile number only; reply STOP to any text to stop them.

Newsletter sign-up

What we collect
Your email address and, if you choose to give them, your name and phone number.
Why
To send you our newsletters and school announcements, because you asked for them. Every email has an unsubscribe link, and you can unsubscribe at any time.

WhatsApp messages

Coming soon
What we collect
We plan to offer booking updates, replies to your messages and school announcements on WhatsApp. It will always be your choice: we only send booking updates if you tick the separate WhatsApp box when you book (a booking never depends on it), and announcements only if you ask for them separately (for example by ticking the WhatsApp box when you subscribe, or sending JOIN and then YES). We use your phone number, your name, the details of your booking and the messages you exchange with us. Photos, voice notes and files you send stay with our messaging provider: our office staff can open them to answer you, but our own systems don't keep copies. Files we send you (such as a letter or a form) are stored with our messaging provider too. Voice notes you send us may be typed out by artificial intelligence (AI) through RepletoryReach so our staff can read them; the text is kept with your messages.
Why
To send you updates about your booking, answer your questions and, if you asked for them, send school announcements. Messages are sent through our WhatsApp messaging provider. You can stop them at any time by replying STOP, and turn them back on by replying START.

Website assistant

Coming soon
What we collect
We may add an assistant to this website that answers questions using information we have already published, such as our FAQs, events and admissions information. Its answers are written by artificial intelligence (AI) provided through RepletoryReach. It would not ask for personal information, and we ask you not to type any. If you do, we would remove phone numbers, email addresses and ID numbers before your question is sent or kept.
Why
To answer your questions quickly, any time of day. We would keep conversations for a short time (see How long we keep it) to improve the answers and prevent misuse.

When you simply visit the website

We don't use advertising or tracking cookies. Your browser may remember your light or dark setting and your recent searches on this website; that stays on your own device. Our servers keep short-lived technical records, such as error reports and connection logs, to keep the website working and secure.

Information about children

The forms on this website are meant for parents, guardians and other adults. When a booking asks for a child's name and grade, we ask the parent or guardian, who agrees to us using it to prepare for the visit. Please don't send us other information about children through the website.

Who processes it for us

A few trusted service providers (POPIA calls them “operators”) process information on our behalf. They may use it only to provide their service to us, must keep it confidential and secure, and may not use it for their own purposes.

ProviderWhat they do for us
Amazon Web ServicesDelivers our emails (for example booking confirmations and newsletters) and stores files we publish on the website.
Our WhatsApp messaging providerWill send and receive WhatsApp messages for us, once WhatsApp messages start and only for people who agreed to them.
RepletoryReach (SMS)Sends booking updates by text message (SMS) for us, only to parents who agreed to them. It receives your mobile number, your name and the text of each message about your booking.
Google (Google Workspace)Hosts the school's email, including the mailbox you write to (info@actshouse.com). When we switch it on, our system reads that mailbox (it can't change anything in it) to file your replies to our emails, and emails our staff choose, with your enquiry or your family's record. Nothing else in the mailbox is stored by our system.
CloudflareRuns a quick security check on our forms to tell people from automated spam, when we have this check switched on.
RepletoryReach (AI)Will generate the answers of our assistants on the website and on WhatsApp with AI, and type out WhatsApp voice notes so our staff can read them, when we switch these on. The assistants receive your question, not your name or contact details; a voice note is sent as you recorded it. Depending on the AI model the school chooses, this may be processed outside South Africa.

We don't share your information with anyone else unless the law requires us to, or you ask us to.

Information sent outside South Africa

Some of these providers store or process information on servers outside South Africa, for example in Europe or the United States. POPIA allows this only when the information stays protected to a standard similar to POPIA, through the laws of that country, binding agreements or the provider's binding rules. We choose providers that commit to this, and we send them only what they need.

The AI behind our assistants on the website and on WhatsApp, and the typing out of WhatsApp voice notes, is provided through RepletoryReach. Depending on the AI model the school chooses, the questions you type and the voice notes you send may be processed outside South Africa. We remove phone numbers, email addresses and ID numbers from typed questions before they are sent.

Pictures marked "Illustration made with AI" and the audio versions of news articles are made with AI through RepletoryReach (possibly outside South Africa) from a short description or the published article, and contain no personal information.

How long we keep it

We keep personal information only for as long as we need it, then delete it or remove anything that identifies you. The periods below are our proposals and are to be confirmed by the school.

InformationKept for (proposed)
Contact form messages24 months after the conversation is closed
Tour bookings24 months after the visit
Assistant conversations (website and WhatsApp)30 days, with personal details removed
Newsletter subscriptionsUntil you unsubscribe. Afterwards we keep only a note that you unsubscribed, so we don't email you again by mistake.

We may keep information for longer if the law requires it, or while a complaint or dispute is open.

How we protect it

  • Everything you send through this website travels over an encrypted (HTTPS) connection.
  • Only school staff who need the information can see it. Each person signs in with their own account, and only administrators can manage those accounts.
  • Passwords and other secrets are stored in protected, scrambled form.
  • Our forms are protected against spam and automated abuse. With what you send, we keep only a scrambled code made from your internet address, never the address itself.
  • We work only with providers that keep information secure, and we review who has access.

If we ever learn that someone has accessed personal information without permission, we will tell the people affected and the Information Regulator as POPIA requires.

Your rights

Under POPIA you have the right to:

  • Access: ask whether we hold information about you and for a copy of it.
  • Correction: ask us to correct information that is wrong, out of date or incomplete.
  • Deletion: ask us to delete information we no longer need or are not allowed to keep.
  • Objection: object to us using your information, including for newsletters and announcements (you can also unsubscribe at any time).
  • Withdraw consent: where we rely on your consent, you can withdraw it. This doesn't affect what we did before.
  • Complain: if you are unhappy with how we handle your information, please tell us first so we can put it right. You may also complain to the Information Regulator of South Africa at inforegulator.org.za.

To use any of these rights, send us a Privacy (POPIA) request (see below). We may need to confirm who you are before we act on a request, and we will reply as soon as we reasonably can.

How to contact us

For questions about this notice or your information, or to use your rights, send a Privacy (POPIA) request with our contact form (it reaches the right person and we keep a record of it), write to info@actshouse.com, or write to our Information Officer, [Information Officer name and email to be confirmed].

Changes to this notice

We will update this notice when our services or the law change, for example before WhatsApp messages or the website assistant start. The date at the top shows when it last changed.