Privacy Policy
Effective Date: November 10, 2025
Last Updated: November 10, 2025
Your privacy matters to us. This Privacy Policy explains how StudentPlug collects, uses, stores, and protects your personal information. We are committed to protecting your privacy and complying with the Protection of Personal Information Act (POPIA) of South Africa.
Table of Contents
- 1. Overview
- 2. Information We Collect
- 3. How We Use Your Information
- 4. Information Sharing & Disclosure
- 5. Data Security
- 6. Data Retention
- 7. Your Rights (POPIA)
- 8. Cookies & Tracking
- 9. Third-Party Services
- 10. Children's Privacy
- 11. International Data Transfers
- 12. Changes to Privacy Policy
- 13. Contact Us
1. Overview
StudentPlug ("we", "us", "our") operates a platform connecting South African students with accommodation, study resources, transportation, events, and political engagement opportunities.
This Privacy Policy applies to:
- Our website (studentsplug.co.za)
- Mobile applications (when available)
- All services provided through our platform
- Communications with us
POPIA Compliance: StudentPlug is committed to complying with the Protection of Personal Information Act 4 of 2013 (POPIA) and the regulations thereunder. We are registered with the Information Regulator.
2. Information We Collect
2.1 Information You Provide
Account Registration:
- Full name
- Email address
- Phone number
- Password (encrypted)
- Date of birth / Age
- Gender
- City and province
Student-Specific Information:
- University name
- Student number
- University email address
- Faculty and course information
- Year of study
- Academic interests
- Student ID documents (for verification)
Service Provider Information:
- Business registration documents
- Insurance certificates
- Property details (for accommodation providers)
- Driver's license and PrDP (for transport drivers)
- Vehicle information and roadworthy certificates
- Academic transcripts (for Study Buddies showing 70%+ grades)
Political Organization Information:
- Organization registration documents
- Authorized representative details
- Election commission credentials (for election bodies)
2.2 Information Automatically Collected
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent, click patterns
- Location Data: GPS coordinates (for transport services, voting stations, accommodation searches)
- Cookies & Tracking: See Section 8 for details
2.3 User-Generated Content
- Messages and chats
- Reviews and ratings
- Event posts and photos
- Campaign posts (political organizations)
- Study questions and answers
- Marketplace listings
2.4 Transaction Information
- Booking details (accommodations, study sessions, rides)
- Payment information (processed by third-party providers)
- Transaction history
- Refund requests
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Platform Operations
- Create and manage your account
- Provide access to platform features
- Process bookings, reservations, and transactions
- Facilitate communication between users
- Enable GPS tracking for transport services
- Verify voting station locations
3.2 Verification & Safety
- Verify student, service provider, and organizational identities
- Conduct background checks (transport drivers)
- Prevent fraud, abuse, and security threats
- Maintain platform integrity
- Ensure election integrity
3.3 Service Improvement
- Analyze usage patterns and trends
- Improve platform features and user experience
- Develop new services
- Conduct research and analytics
- Personalize content and recommendations
3.4 Communication
- Send transactional notifications (bookings, payments, etc.)
- Provide customer support
- Send platform updates and announcements
- Deliver marketing communications (with your consent)
- Notify about election dates and results
3.5 Legal & Compliance
- Comply with legal obligations
- Enforce our Terms of Service
- Protect our rights and property
- Respond to law enforcement requests
- Resolve disputes
3.6 Business Intelligence
- Generate demographic insights (anonymized and aggregated)
- Provide analytics to business partners
- Understand geographical distribution
- Track platform growth and engagement
4. Information Sharing & Disclosure
We do not sell your personal information. We only share information in the following circumstances:
4.1 With Other Users
- Your public profile information (name, university, photo)
- Reviews and ratings you post
- Messages sent to other users
- Event RSVPs and attendance
- Study Buddy profiles (including transcripts showing grades)
- Transport driver information (for safety)
4.2 With Service Providers
We share information with trusted third-party service providers who help us operate the platform:
- Payment processors (for transactions)
- Cloud hosting providers (for data storage)
- Email service providers (for notifications)
- Analytics providers (for platform improvement)
- Background check services (for driver verification)
These providers are contractually obligated to protect your information and use it only for specified purposes.
4.3 For Legal Reasons
We may disclose information if required to:
- Comply with legal process (court orders, subpoenas)
- Enforce our Terms of Service
- Protect our rights, property, or safety
- Protect users' safety or legal rights
- Investigate fraud or security issues
- Cooperate with law enforcement
4.4 Business Transfers
If StudentPlug is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
4.5 With Your Consent
We may share your information for other purposes with your explicit consent.
4.6 Aggregated & Anonymized Data
We may share aggregated, anonymized data that does not identify you personally for:
- Business intelligence reports
- Marketing partnerships
- Research purposes
- Platform analytics
5. Data Security
We implement industry-standard security measures to protect your personal information:
- Encryption: Data transmitted over the internet is encrypted using SSL/TLS
- Password Security: Passwords are hashed and encrypted
- Access Controls: Limited employee access on a need-to-know basis
- Secure Storage: Data stored on secure servers with regular backups
- Regular Audits: Periodic security assessments and updates
- Monitoring: Continuous monitoring for suspicious activity
Important: While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Your Role in Security
You can help protect your account by:
- Using a strong, unique password
- Not sharing your password with others
- Logging out after using shared devices
- Reporting suspicious activity immediately
- Keeping your contact information up to date
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide services to you
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
- Maintain business records
Retention Periods
- Active Accounts: Retained while your account is active
- Inactive Accounts: May be deleted after 2 years of inactivity
- Transaction Records: Retained for 7 years (tax and legal requirements)
- Support Communications: Retained for 3 years
- Marketing Data: Until you opt out or withdraw consent
Account Deletion
When you delete your account:
- Your profile and personal information will be removed
- Some information may be retained in backups for 30 days
- Transaction records will be retained as required by law
- Public content (reviews, posts) may remain but will be anonymized
7. Your Rights (POPIA)
Under the Protection of Personal Information Act (POPIA), you have the following rights:
7.1 Right to Access
You have the right to request a copy of the personal information we hold about you.
7.2 Right to Correction
You have the right to request that we correct inaccurate or incomplete information. You can update most information directly in your account settings.
7.3 Right to Deletion
You have the right to request deletion of your personal information, subject to legal retention requirements.
7.4 Right to Object
You have the right to object to processing of your personal information for:
- Direct marketing purposes
- Profiling or automated decision-making
- Processing based on legitimate interests
7.5 Right to Restrict Processing
You have the right to request that we limit how we use your information in certain circumstances.
7.6 Right to Data Portability
You have the right to receive your personal information in a structured, commonly used format and transmit it to another service.
7.7 Right to Withdraw Consent
Where we process your information based on consent, you have the right to withdraw that consent at any time.
7.8 Right to Complain
You have the right to lodge a complaint with the Information Regulator of South Africa:
Information Regulator (South Africa)
📧 Email: inforeg@justice.gov.za
🌐 Website: www.justice.gov.za/inforeg/
Exercising Your Rights
To exercise any of these rights, contact us at privacy@studentsplug.co.za. We will respond within 30 days.
9. Third-Party Services
StudentPlug integrates with third-party services:
- Payment processors (for transactions)
- Cloud storage providers
- Email services
- Analytics tools
- Background check services
Note: Third-party services have their own privacy policies. We are not responsible for their privacy practices. We recommend reviewing their policies before providing information to them.
Links to Other Websites
Our platform may contain links to external websites. We are not responsible for the privacy practices or content of these sites.
10. Children's Privacy
StudentPlug is intended for users who are:
- 18 years of age or older, OR
- Matriculants (Grade 12 students) preparing for university
We do not knowingly collect personal information from children under 16 years of age. If we become aware that we have collected information from a child under 16, we will delete it promptly.
Parents/Guardians: If you believe your child has provided personal information to us, please contact us immediately at privacy@studentsplug.co.za.
11. International Data Transfers
StudentPlug primarily operates in South Africa. However, some of our service providers may be located outside South Africa, which may involve transferring your data internationally.
When we transfer data outside South Africa, we ensure:
- Compliance with POPIA requirements
- Adequate safeguards are in place
- Data protection standards equivalent to South African law
- Contractual obligations for data protection
12. Changes to Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date
- Post the new policy on our website
- Send email notifications for significant changes
- Request your consent where required by law
Your continued use of StudentPlug after changes constitutes acceptance of the updated Privacy Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
13. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Data Protection Officer:
StudentPlug Data Protection
📧 Privacy Email: privacy@studentsplug.co.za
📧 General Support: support@studentsplug.co.za
🌐 Website: studentsplug.co.za
Response Time: We will respond to your requests within 30 days as required by POPIA.
Business Address:
StudentPlug
Republic of South Africa
Privacy Commitment
At StudentPlug, we are committed to protecting your privacy and ensuring transparency in how we handle your personal information. We comply with POPIA and respect your data protection rights.
Key Points:
- ✓ We don't sell your personal information
- ✓ We use industry-standard security measures
- ✓ You have full control over your data
- ✓ We comply with South African privacy laws (POPIA)
- ✓ We're transparent about data collection and use