Privacy Policy

Last updated: 11 November 2025

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how the School collects, uses, discloses, stores and protects personal information when you visit our website (https://virtual‑reality.school/) or otherwise engage with us.

By accessing or using our website or services, you consent to the practices described in this Policy. If you do not agree with this Policy, please do not use our website or provide us with your personal information.

1. Who we are

The School is the “responsible party” for the personal information you provide to us. Our contact details are:
Address: 11 Scafell Road, Floracliffe, Johannesburg, South Africa 1709.
Email: info@virtual-reality.school
Phone Number: +27 72 234 7513

2. What information we collect

We may collect and process the following kinds of personal information:

• Identity & contact information: name, email address, postal address, telephone/mobile number, date of birth (if needed), etc.
• Account and user credentials: usernames, passwords (hashed securely), security questions/answers (if relevant).
• Usage and technical information: IP address, browser type, device type, operating system, referring pages, pages visited, time on site, click‑stream data, cookies and similar technologies.
• Payment information (if applicable): billing name, billing address, transaction details, payment method (we do not store full credit‑card numbers unless on secure tokenised systems).
• Communications and correspondence: any messages you send us via contact forms, email, chat, telephone, or otherwise.
• Other information as required for specific programmes or services (for example educational background, professional qualifications, preferences, feedback, assessments) if you choose to provide such information.

3. How we collect information

• Directly from you: when you register for our services, fill in forms (online or offline), subscribe to newsletters, contact us, apply for a programme, make a payment, or otherwise provide information.
• Automatically: via cookies, log files, analytics, our website platform and similar means when you browse or use our website.
• From third parties: as needed, from service providers, partners, publicly available sources, or authorised data suppliers (with your consent or as permitted under law).
• From you via social media or integrations: if you link or sign‑in with a social account, we may receive information from that provider (subject to your permissions).

4. Why we collect and process your information & lawful bases

We collect and process personal information for legitimate, explicit and specified purposes, and only to the extent necessary. These purposes include (but are not limited to):

• To provide you with access to our website, services, programmes, courses, and to manage your account.
• To respond to your enquiries, assist you, and provide customer support.
• To send you service‑related communications, updates, newsletters (with your consent).
• To process payments, subscriptions, invoices and other transactions.
• To personalise and improve your experience on our website, adapt content, features and recommendations.
• To monitor, analyse and optimise our website and services, including analytics, usage statistics and performance metrics.
• To comply with legal and regulatory obligations (including under POPIA), enforce our terms and conditions, prevent fraud, security breaches, illegal activities or misuse of our website or services.
• Where required, to transfer or share your information with third parties for legitimate business purposes (see section 6).

Under POPIA, processing of personal information is lawful if it meets one or more of the lawful bases (e.g., consent; performance of a contract; compliance with legal obligation; protection of legitimate interests; etc.).

6. Disclosure and sharing of information

We may share your personal information with:

• Service providers and partners who assist us in delivering our services (such as hosting, analytics, payment processing, email delivery, customer support). These parties will be bound by confidentiality and data‑protection obligations.
• Affiliated entities or subcontractors if required to deliver our programmes.
• Legal & regulatory authorities or other third parties where required by law, to prevent fraud or illegal activity, or to enforce our rights and terms.
• Business transfers: in the event of a merger, acquisition, reorganisation or sale of assets, personal information may be transferred as part of that transaction (subject to confidentiality and data protection assurances).

7. Cookies and similar technologies

We use cookies, web beacons, tracking pixels and other technologies to collect usage and technical information about how you use our website, improve navigation, personalise content and advertising, and analyse website performance.

You may set your browser to refuse or alert you about cookies. However, note that if you disable some cookies, parts of the website may not function properly.

We will provide or link to a separate Cookie Policy if required.

8. Data security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, destruction or damage. This includes encryption, access controls, periodic reviews of our security practices.

While we strive to use best practices, no transmission over the internet or electronic storage is completely secure; we cannot guarantee absolute security of your information.

9. Data retention

We will retain your personal information only for as long as necessary for the purposes set out in this Policy, or as required by law or to fulfil legitimate business purposes (such as accounting, audits, dispute resolution). Once retention is no longer necessary, your data will be securely deleted or anonymised.

10. Your rights

Under POPIA you (as a data subject) have certain rights in relation to your personal information, including:

• The right to request access to personal information we hold about you.
• The right to request correction, updating or deletion of your personal information.
• The right to object to or restrict processing of your personal information in certain circumstances.
• The right to withdraw consent (where processing is based on consent) without affecting the lawfulness of prior processing.
• The right to lodge a complaint with the relevant regulatory authority (the Information Regulator) if you believe your rights have been infringed.

11. Children’s privacy

If you are under 18 years of age (or the legal age in your jurisdiction) you must obtain consent of a parent or guardian before providing any personal information to us. If we become aware that we have collected personal information from a child without proper consent, we will take steps to delete that information.

12. International transfer of data

As noted in section 6, if your personal information is transferred outside South Africa, we will ensure comparable levels of protection via appropriate safeguards, contractual terms and your informed consent where required.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing practices, legal requirements, or business needs. We will publish the updated version on our website and indicate the “last updated” date at the top. We encourage you to review the Policy periodically.

14. How to contact us

If you have any questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact:
Address: 11 Scafell Road, Floracliffe, Johannesburg, South Africa 1709.
Email: info@virtual-reality.school
Phone Number: +27 72 234 7513