Privacy Notice

1. Who operates this website

This website is the personal executive portfolio of Lerato Mokalapa, Chief Executive Officer & Co-Founder of eduSYMS (Pty) Ltd. It is operated on her behalf by her team.

Enquiries about this notice, or about information you have submitted, can be sent using the enquiry form.

2. Information submitted through forms

This website has one form: the enquiry form on the Contact page. When you submit it, the following information is collected:

• Full name — required, so we know who is writing.
• Email address — required, so we can reply.
• Country — required, to route the enquiry appropriately.
• Enquiry type and subject — required, to direct it to the right person.
• Message — required; the content of your enquiry.
• Organisation and role — optional, to provide context.
• Phone number — optional, only if you would like to be contacted by phone.
• Preferred response method — so we reply the way you prefer.
• Your consent — recorded together with the date and time it was given.

Nothing on this form is collected that is not needed in order to respond to your enquiry. There is no newsletter signup, no tracking pixel in our replies and no profiling of the people who write to us.

Submissions are checked by Cloudflare Turnstile before they are accepted. This is an anti-abuse measure that distinguishes people from automated scripts.

3. Technical and analytics information

Like all websites, this site is served over the internet, which means our infrastructure provider necessarily processes technical information such as your IP address in order to deliver the pages to you and to protect the site from abuse.

For audience measurement we use Cloudflare Web Analytics, which is privacy-focused: it does not use cookies, does not fingerprint visitors and does not track people across websites or over time. It reports aggregate information such as page views, referring sites, country-level location and performance measurements.

We do not use advertising trackers, social media pixels or cross-site analytics.

4. Purpose of processing

• To respond to enquiries you submit to us.
• To route enquiries to the appropriate person.
• To protect the website and the form from automated abuse and spam.
• To understand, in aggregate, how the website is used and how well it performs.
• To meet any record-keeping obligations that apply to us.

Information you submit through the enquiry form is processed on the basis of the consent you give when submitting it. You may withdraw that consent at any time — see section 10.

5. Service providers and infrastructure

We keep the number of third parties deliberately small. The following providers process information on our behalf:

• Cloudflare — website hosting (Cloudflare Pages), content delivery, security, the Turnstile anti-abuse check and Web Analytics.
• Resend — delivery of enquiry emails from the website to our inbox.
• Our email provider — where the enquiry is received and where any correspondence with you is stored.

Fonts are served from this website itself rather than from a third-party font service, so no request is made to an external provider when you load a page.

6. Data retention

Enquiries are retained for as long as needed to respond to them and to maintain a reasonable record of the correspondence, after which they are deleted.

To be confirmed before publication: the specific retention period for enquiry correspondence, and the review cycle for deleting it. This must reflect the actual practice of the executive office.

Cloudflare Web Analytics data is aggregate and is retained according to Cloudflare’s own retention schedule. It cannot be used to identify you.

7. Security measures

• The site is served exclusively over HTTPS, with HSTS enabled.
• A Content Security Policy and related response headers restrict what the site is permitted to load and where it may send data.
• Form submissions are validated on the server, and all credentials are held as encrypted environment secrets that are never exposed to your browser.
• The enquiry form is protected by Cloudflare Turnstile and rate controls.

8. Cross-border processing

Our infrastructure and email providers operate globally. This means information you submit may be processed on servers outside your country of residence, including outside South Africa and outside the European Economic Area.

To be confirmed before publication: the transfer mechanism relied upon for cross-border processing, and any territory restrictions to be configured with our providers. This requires review against the privacy law applicable to the markets served.

9. Cookies and similar technologies

This website sets no cookies of its own. There is no analytics cookie, no advertising cookie and no consent banner, because none is needed.

Cloudflare Turnstile may set a short-lived token in your browser as part of the anti-abuse check when you submit the enquiry form. It is strictly necessary for that purpose and is not used to track you.

10. Your rights and how to contact us

Depending on where you live, you may have the right to:

• ask what information we hold about you;
• ask us to correct information that is inaccurate;
• ask us to delete information we no longer need;
• withdraw consent you previously gave;
• object to how we are processing your information;
• complain to your data protection regulator.

To make any of these requests, contact us using the enquiry form. We will respond within a reasonable period.

To be confirmed before publication: the named contact for privacy requests, the response timeframe committed to, and the relevant regulator to name for each market served.

11. Changes to this notice

We may update this notice as the website changes. When we do, we will update the “last updated” date at the top of this page. Material changes will be made clear on the page itself.