Dennis G Odoom

policy, if you consent to it, or if the law (including the Applicable Law) allows or requires us to share it. We will typically share or disclose your personal information to: Our business partners or third party processors to provide you with our services, such as data storage providers, third party payment processors, software licensors or partners etc. in accordance with written agreements with those third parties; Our client, where the individual user is not our client; legal and regulatory authorities, upon their request, or for the purposes of reporting as prescribed or for purposes of any breach of legislation; accountants, auditors, lawyers and other external professional advisors; any relevant party to the extent necessary for the establishment, exercise or defence of legal rights, criminal offences, threats to public security, etc.; any relevant third party in the event that we plan to or sell or transfer all or any portion of our business or assets; and any relevant third party provider where we use third party advertising, plugins or content in our services.

• Last updated: September 2022 1
• INTRODUCTION
• In this policy, “Instill Education”, “us” or “we” refers to either or both of (i) Instill Education (Company
• No.: C134352), incorporated in Mauritius; and (ii) Instill Education (Pty) Ltd (Registration No.: 2015/443219/07), incorporated in South Africa
• The right to privacy is important to Instill Education and we are committed to processing your personal information in compliance with applicable data protection laws, including the Protection of Personal Information Act 4 of 2013 ("POPI"), the Mauritian
• Data Protection Act 20 of 2017 (“Mauritian DPA”), the General Data Protection Regulation ((EU) 2016/679) ("GDPR"), the Kenyan Data Protection Act, 2019 (“Kenyan DPA”) and Ghana Data
• Protection Act, 2012 (“Ghana DPA”) (collectively "Applicable Law")
• This privacy policy applies to all processing of personal information of customers, potential customers, suppliers or other relevant third parties
• Personal information" means personal information as defined in Applicable Law, being information that may identify you
• The purpose of this policy is to explain your and our rights and obligations in respect of your personal information
• You" means any natural or legal person whose personal information we process and may include individuals employed or otherwise associated with one or more of our clients, as received from our client(s)
• We may change the terms of this policy if the law (including any
• Applicable Law) or our business processes require it
• The latest version of this policy will always apply
• 2
• COLLECTING YOUR PERSONAL INFORMATION
• We collect Personal Information about you from the following sources:
• Directly from you or from our client where the individual user is not our client when you provide it to us, such as when you apply or become our customer, contact us or through the course of our relationship with you;
• From your web browser when you visit our website, subject to the settings of your web browser;
• From public sources where you have made your personal information public, such as on social media or online platforms; 2
• From your use of our services or use of any features or resources available on or through our services; and
• From third parties if the law allows for it, for example, school districts that volunteer educator information and in which case the school district must also comply with their obligations under Applicable Law
• 3
• CATEGORIES OF PERSONAL INFORMATION THAT WE PROCESS
• We collect various categories of personal information depending on the reason for processing
• The categories may (but will not necessarily) include:
• General personal details: for example, for individuals, we collect name and surname, date of birth, age, nationality, race, gender, sex, pregnancy status, ethnic or social origin, colour, sexual orientation, physical and mental health, well-being, disability, religion, conscience, belief, culture, language preferences, email address, physical address, contact information, biometric information, marital status, place of birth, education, financial history, medical history, employment history, criminal history, personal views, preferences and opinions, another’s views or opinions about you, and identifying number (such as an employee, identity or passport number); and for juristic persons, we collect registered name, registration number, address, and VAT details
• Contact details: your address, contact number, email address, public social media profiles
• User information: personal information included in correspondence, transaction documents, use of the services or other materials that we process when providing the services
• Account details: for example, username, password (note that we cannot view this), usage data, and aggregate statistical information
• Consent records: records of any consents you have given us, as well as any records of your withdrawal or refusal of consent
• Payment details: for example, payment method, information provided by payment gateway service providers, payment amount, date and reason for payment and related information
• Data relating to our services: for example, your device type, the operating system and browser, browser settings, IP address, dates and times of connecting to and using the website and other technical communications information, including cookies and other technologies
• 3
• Content and advertising data: records of your interactions with our online advertising on the various websites which we advertise and records relating to content displayed on web- pages displayed to you
• Views and opinions: any views and opinions that you choose to share with us, or publicly post on social media platforms or elsewhere
• Children's Personal Information: Although our services are not aimed at persons under the age of 18, where we collect personal information of any person that qualifies as a child in terms of Applicable Law which is necessary for us to render the services, it will be with the consent of a parent or guardian as required by Applicable Law
• 4
• PURPOSES OF PROCESSING PERSONAL INFORMATION
• We only process adequate and relevant personal information for the following purposes and legal bases:
• For our agreement with you or for our client where the individual user is not our client;
• To operate and manage your application, account or relationship with us;
• To monitor and analyse our business to ensure that it is operating properly, for financial, If we engage third parties to process your personal information for us, these processors will be appointed in terms of a written agreement which will require them to only process personal information on our written instructions, use appropriate measures to ensure the confidentiality and security of it and comply with any other requirements set out in the agreement and required by
• Applicable Law
• 5 7
• INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
• Due to the nature of the services and our business purposes, we may need to transfer personal information to and from recipients in different countries and will always do so in compliance with
• Applicable Laws
• We will only transfer personal information to third parties in countries with adequate data protection laws or transfer it in terms of a written agreement with the recipient which imposes data protection requirements as required by Applicable Law
• Please note that when you transfer any personal information directly to a third party in another country, we are not responsible for that transfer and such transfer is not based on or protected by this policy
• 8
• SECURITY
• We have implemented appropriate technical and organisational security measures in accordance with Applicable Law, designed to protect personal information against accidental or unlawful destruction, loss, alteration, disclosure, access and other unlawful or unauthorised forms of processing
• The internet is an open and often vulnerable system and the transfer of information via the internet is not completely secure
• Although we will implement all reasonable measures to protect personal information, we cannot guarantee the security of your personal information that you transfer to us using the internet and you use the internet at your own risk
• 9
• YOUR LEGAL RIGHTS
• You have the following rights in relation to your personal information, but note that they are not absolute and may be limited under Applicable Law (meaning that we may not be able to honour your requests in all instances):
• Right of access: you have the right to be informed of and request a copy of your personal, 7 12
• CHILDREN'S INFORMATION AND SENSITIVE/SPECIAL PERSONAL
• INFORMATION
• We do not intentionally collect or use children's personal information without the consent of a parent or guardian of the child
• We may, however, collect and/or process special personal information as a result of our business relationship with you, but will only do so with consent or if allowed by Applicable Law
• 13
• RETENTION OF INFORMATION
• We take reasonable steps to ensure that we only process personal information for the minimum period necessary for the purposes set out in this policy, including any period necessary to establish, exercise or defend any legal rights
• We therefore retain personal information in accordance with the required retention periods in terms of Applicable Laws, for legitimate business purposes or if an obligation is imposed on us to retain information for a certain period of time
• We may retain information indefinitely in a de-identified format for research and statistical purposes, which may include for example statistics of how you use the website and services
• 14
• SECURITY BREACH
• We will report any security breach to the applicable regulatory authority in terms of Applicable Laws and to the data subjects whose personal information is involved in the breach
• If you want to report any concerns about our privacy practices or if you suspect any breach regarding your personal information, please send an email to io@instill.education
• 15
• LODGING A COMPLAINT
• If you want to raise any objection or have any queries about our privacy practices, you can contact our information officer Thomas Peter Parry on tom@instill.education
• You also have the right to formally lodge a complaint as follows:
• Applicable
• Law
• Regulatory authority name
• Contact details

• 4 5. DIRECT MARKETING If you are a customer, we may contact you to provide information about our products or services. If you are not a customer, we will only send you electronic direct marketing communications if you consented to it, or otherwise in compliance with Applicable Laws. You may unsubscribe from any direct marketing at any time if you click on the unsubscribe link included in the communication or if you contact us and request to unsubscribe. We will not send you any direct marketing if you unsubscribe, but may still contact you for purposes of the services we render or our business relationship with you. We will not sell your personal information or provide it to third parties for their marketing purposes. 6. DISCLOSURE OF PERSONAL INFORMATION TO THIRD PARTIES