1. Who we are
SA Mobility is a trading style of GONO GROUP (PTY) LTD (Reg No 2016/527000/07), powered by Pure Leadership. For purposes of POPIA, GONO GROUP (PTY) LTD is the "Responsible Party" that determines the purpose and means of processing your personal information.
2. Information we collect
- Identity data: full name, ID or passport number where required, date of birth.
- Contact data: phone, email, postal/physical address, city and province.
- Application & enrollment data: experience level, brand interests, motivation statements, payment method and reference.
- Payment data: transaction reference, amount, payment status (we do not store full card numbers — these are processed by our payment provider, iKhokha).
- Technical data: IP address, device type, browser, pages visited, cookies and similar identifiers.
3. Lawful basis & purpose
We process your personal information only where we have a lawful basis under POPIA, namely:
- Your consent, given when you submit an application or accept this policy.
- Performance of a contract — to deliver the training programme you have enrolled in.
- Compliance with a legal obligation under South African law.
- Our legitimate interest in operating, improving and securing our services.
4. How we use your information
- To assess and process your application.
- To verify payment and confirm enrollment.
- To deliver training, mentorship, certification and student support.
- To communicate with you about your application, payment, training and important updates.
- To prevent fraud, secure our systems and comply with the law.
5. Sharing your information
We do not sell your personal information. We share it only with:
- Our payment processor, iKhokha, to facilitate secure card transactions.
- Cloud hosting and email infrastructure providers under appropriate confidentiality undertakings.
- Pure Leadership and accreditation partners for the limited purpose of certification.
- Regulators or courts where required by law.
6. Cross-border transfers
Some of our service providers may process data outside the Republic of South Africa. Where this happens, we ensure that an adequate level of protection is in place, in accordance with section 72 of POPIA.
7. Retention
We retain personal information only as long as necessary to fulfil the purposes set out in this policy or as required by law (typically 5 years from the end of your engagement for tax and audit purposes), after which it is securely deleted or anonymised.
8. Your rights under POPIA
- Access the personal information we hold about you.
- Request correction or deletion of inaccurate information.
- Object to processing, including for direct marketing.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with the Information Regulator of South Africa.
9. Security
We apply appropriate technical and organisational measures including SSL/TLS encryption, role-based access control, secure authentication, encrypted backups and routine security reviews. While no system is 100% secure, we treat your data with the highest level of care.
10. Information Officer
11. The Information Regulator
Information Regulator (South Africa) — JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. Email: complaints.IR@justice.gov.za.
12. Changes to this policy
We may update this policy from time to time. The latest version is always available on this website with an updated effective date.