Privacy notice
Last updated: 5 November 2026.
1. Who we are
This notice explains how Tenlever handles your personal information under the Protection of Personal Information Act, 2013 (POPIA).
The responsible party is Tenlever (Pty) Ltd, a private company (registration number 2026/886144/07).
- Physical address: 21 Castle Close, Brackenfell South, Cape Town
- Telephone: +27 71 954 0690
- Email: [email protected]
- Information Officer: Zain Sulaiman, Director, contactable at [email protected]
2. What we collect
When you join a list or ask to be told when a track opens: - your first name; - your email address; - the track you are interested in; - a record of your consent: the wording you agreed to, the page you were on, and the date and time you ticked the box.
When you book a workshop (from 12 November 2026): - your name, email address and, if you give it, your phone number and business name; - the workshop and date you booked, the amount paid and your booking reference; - if your business pays, the invoicing details you give us.
Your card or bank details are entered on the secure page of our payment provider, Paystack. We do not see or store your full card number. We receive a confirmation that you have paid, and the payment provider's reference.
When you visit the website: our hosting provider records technical information such as your IP address, browser type and the pages requested, for security and to keep the site running. We do not use this to identify you.
During a live workshop: your name and any camera, microphone or chat contributions are visible to the facilitator and other learners while the session runs. See "Recording" below.
We do not ask for special personal information (such as health, religion or race), ID numbers or information about children. Our workshops are for adults (18 and over). If you think we hold information about a child, email us and we will delete it.
3. Why we use it, and our lawful basis
| What we do | Why | Lawful basis under POPIA |
|---|---|---|
| Email you when your track opens and about related Tenlever workshops | You asked us to | Your consent (s11(1)(a) and s69) |
| Keep a record of your consent and of any unsubscribe | To prove we have permission and to make sure we never email you after you opt out | Our legal obligation and legitimate interest (s11(1)(c) and (f)) |
| Take your booking, take payment, send your confirmation, joining link, setup checklist and any changes to the workshop | To perform our contract with you | Contract (s11(1)(b)) |
| Issue invoices and keep financial records | To meet tax and company law requirements | Legal obligation (s11(1)(c)) |
| Handle questions, complaints and refunds | To deal with your request | Contract and legitimate interest (s11(1)(b) and (f)) |
| Keep the website secure | To protect the site and its users | Legitimate interest (s11(1)(f)) |
We will not sell, rent or swap your personal information. We will not use it for any purpose that is not listed here without telling you first and, where the law requires, asking for your consent.
4. Marketing emails and how to unsubscribe
We only send marketing email to people who have said yes, or to people who have booked a Tenlever workshop and did not object when they booked (POPIA s69(3)). Every marketing email will say that it comes from Tenlever and will include a one-click unsubscribe link and an email address you can write to.
You can withdraw consent at any time by clicking "unsubscribe" or emailing [email protected] with "unsubscribe". It is free. We will stop within 5 business days. Withdrawing consent does not affect anything we did before you withdrew it. If you have booked a workshop, we will still send emails you need for that booking.
5. Who we share it with (our operators)
We use a small number of service providers ("operators") who process information on our behalf, under written terms that require them to keep it confidential and secure (POPIA s20 and s21):
- Website hosting: Cloudflare (website hosting and email forwarding)
- Sign-up forms: MailerLite, once our sign-up form goes live (stores sign-ups in the European Union). Until then, you join by emailing us and your request stays in our Google mailbox
- Email sending and list management: MailerLite
- Payments: Paystack (from 12 November 2026)
- Live workshop platform: video platform, confirmed before the first workshop
- Email account and files: Google (Gmail)
We may also disclose information if the law requires it, or to our professional advisers (such as an accountant or attorney) under a duty of confidentiality.
6. Information sent outside South Africa
Some of these providers store or process information on servers outside South Africa, for example in the United States or the European Union. POPIA s72 allows this only in limited cases. We transfer information only where:
- the provider is bound by law, binding corporate rules or a binding agreement that gives a level of protection substantially similar to POPIA; or
- the transfer is necessary to perform our contract with you (for example, to send your joining link or process your payment); or
- you have consented.
Cloudflare and MailerLite may process information in the United States and the European Union; Google may store email in the United States. Each is bound by its own data protection terms.
7. How long we keep it
| Information | How long |
|---|---|
| List sign-ups (name, email, track) | Until you unsubscribe, or 24 months after we last emailed you about your track, whichever comes first |
| Consent records | For as long as we hold your details, plus 3 years, so we can show we had permission |
| Unsubscribe record (email address and date only) | For as long as we send marketing, so we never email you by mistake |
| Booking, invoice and payment records | 7 years after the end of the financial year, as tax and company law require |
| Website technical logs | As set by our hosting provider, usually no more than 30 days |
After that, we delete or anonymise the information.
8. How we keep it safe
We take reasonable technical and organisational steps to protect your information (POPIA s19), including: using reputable providers with encrypted connections, two-step login on all Tenlever accounts, limiting access to people who need it, and not storing card details ourselves. If we believe your information has been accessed without authority, we will tell you and the Information Regulator as soon as reasonably possible (POPIA s22).
9. Your rights
You have the right to: - ask whether we hold information about you and get a copy of it; - ask us to correct or delete information that is wrong, out of date, incomplete or that we are no longer allowed to keep; - object to us using your information, including for marketing, at any time; - withdraw your consent at any time; - not be subject to decisions made only by automated means that seriously affect you (we do not make such decisions); - complain to the Information Regulator.
To use any of these rights, email [email protected]. We may ask you to confirm your identity first. We will reply within 30 days. There is no charge for asking us to correct, delete or stop marketing.
10. Complaints
Please contact us first at [email protected] so we can try to fix the problem. You may also complain to the Information Regulator (South Africa):
- Website: inforegulator.org.za (complaints are lodged through the Regulator's eServices Portal)
- General enquiries: [email protected]
- Telephone: 010 023 5200 | Toll free: 0800 017 160
- Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
11. Recording
Tenlever workshops are not recorded. If we ever plan to record a session, we will tell you in writing before you book, explain why and who will see it, and give you a way to take part without appearing in it. Please do not record sessions yourself.
12. Cookies
This website does not use analytics, advertising or tracking cookies. Our hosting provider may set a small number of strictly necessary cookies for security. Our sign-up form and payment pages may set cookies needed to work; these are covered by those providers' own policies. If we ever add analytics, we will update this notice and ask for your consent first.
13. Changes to this notice
We may update this notice. The date at the top shows the latest version. If a change affects how we use information you have already given us, we will email you before it takes effect.