Privacy Policy

Isibonelo High School is a public secondary school. The Principal acts as the school's Information Officer for the purposes of POPIA. You can reach the Information Officer at scelo@a-better-africa.com or 076 754 4177.

• Name and email address you provide when you sign in to place an order.
• Order details (items, quantities, totals, school chosen as beneficiary).
• Basic technical information (IP address, browser type) used only to keep the site secure and rate-limit abusive traffic.
• We do not collect learner records on this site. Learner academic and administrative data is handled separately by the school office in line with the South African Schools Act.

POPIA treats anyone under 18 as a child. If you are under 18, please ask a parent or legal guardian before placing an order or sharing your email with us. We will not knowingly process a child's personal information for marketing.

• To record and fulfil your order through Abantu AgriHub.
• To process payment via PayFast (Pty) Ltd, our licensed South African payment processor, when the school's batch order is ready for collection.
• To communicate about your order, collection, and receipt.
• To detect fraud, secure the platform, and meet legal obligations.

We share the minimum information needed with:

• Abantu AgriHub — order storage and school beneficiary tracking.
• PayFast (Pty) Ltd — payment processing. PayFast is a registered South African PSP and is PCI-DSS compliant; card data never touches our servers.
• Our infrastructure provider (Lovable Cloud / Supabase) for hosting and authentication.

We do not sell personal information. We do not transfer your information outside South Africa except where our hosting provider's standard infrastructure does so under POPIA-compliant safeguards.

Order and account records are kept for as long as needed to support the school's fundraising programme and to meet tax and accounting rules (typically five years). You can ask us to delete your account earlier, subject to those legal retention periods.

We use HTTPS for all traffic, store passwords as salted hashes, and restrict access to personal information to authorised staff. Payment authorisation happens on PayFast's environment, not ours. We also apply rate limiting on payment notification endpoints to help prevent abuse.

You have the right to:

• Ask what personal information we hold about you.
• Request that we correct or delete inaccurate information.
• Object to processing or withdraw consent at any time.
• Lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, email scelo@a-better-africa.com.

We use essential cookies and local storage only — to keep you signed in and remember your basket. We do not use advertising trackers.

We may update this notice as the school's programme grows. The "Last updated" date at the top will always reflect the latest version.