AGT CIE Privacy Policy

Who is responsible for your information?

AGT CIE determines the purposes for which information is collected for its training programmes and enquiries. Our address is Springgrove Estate, Lothair, Mpumalanga, South Africa. Our Information Officer is Stephen Jordan. For privacy matters, email info@agt-cie.co.za, marked ‘For the attention of the Information Officer’, or call 0833097930.

Technology Innovation Agency (TIA) support for the centre does not give TIA unrestricted access to your application. Any sharing must have a defined purpose and lawful basis.

Information collected in an application

We collect the information you provide directly in the training application. Please give only relevant information and avoid including another person’s details in free-text answers.

Why we ask and which answers are required

We use application information to identify and contact applicants, understand training and support needs, assess applications, arrange attendance and administer the programme. An ID number is requested for identity and record matching; this website does not claim that a particular law requires you to supply it.

Fields marked with an asterisk are required by the online application process. If you omit them, the form cannot be submitted. You may contact us to discuss an alternative way to apply or why a particular detail is necessary. Submission and a receipt do not guarantee acceptance. The website checks completeness and age; it does not automatically rank applicants or allocate training places.

Sensitive demographic and accessibility questions are optional. You can leave them blank or choose ‘Prefer not to say’ where available. Refusing optional information, surveys or publicity is not itself a reason to refuse your application; omitting practical accommodation details may limit our ability to arrange suitable support.

Lawful processing and your consent choices

Core application processing serves your request to be considered for training and our legitimate programme-administration interests, where POPIA permits it. Any legal obligation relied on must be identified. A privacy acknowledgement records that the notice was provided; it is not blanket consent to unrelated uses.

Race and health-related information will be processed only with your separate, specific consent or another applicable POPIA authorisation. Our form requests consent when you provide race or disability/accessibility details. We use these details for inclusion planning, relevant support and de-identified programme reporting. Do not provide medical records or detailed diagnoses in this form.

Survey participation is optional. An indication that you are willing to share your story allows us to discuss it with you; it does not authorise publication of your name, photograph, story or identifiable health information. Separate permission identifying the material, purpose and audience is needed before publication.

You can withdraw consent for future consent-based processing by contacting us. Withdrawal does not undo lawful processing already completed and does not remove records we must lawfully retain. We will explain the practical consequences of a request.

Application submission and email confirmations

Unsubmitted answers stay in this page’s browser memory and are lost when the page is closed or reloaded. The application does not save drafts to browser storage or automatically send answers as you type. Treat a shared device with care.

A saved reference confirms receipt of your submission. An unavailable or failed-save message means that no successful submission has been confirmed; keep a copy of your answers or contact AGT CIE. If a connection fails after a save, contact us before sending a fresh application so we can check for an existing record.

Submission sends your answers to AGT CIE’s private storage in Cloudflare R2. Resend processes the recipient’s email address, name where included, reference, email content and delivery metadata for confirmations and admin notifications. ID numbers, disability details and the full application answers are excluded from these emails. Email failure does not erase a saved submission.

Who may receive information

Access is limited to authorised AGT CIE personnel and service providers needed for programme administration, hosting, secure storage and communication. Providers must operate under appropriate confidentiality, security and processing instructions. We do not sell application information.

Programme statistics shared with TIA, funders or partners should be aggregated or de-identified so individuals cannot reasonably be identified. Identifiable reporting requires a documented lawful basis and appropriate notice, and specific consent where applicable. We may disclose information when legally required, with disclosure limited to what is necessary.

Service providers and information outside South Africa

Cloudflare provides application storage through R2 and the supporting storage service through Workers. The R2 bucket is currently placed in Western Europe; this placement is not a guarantee that all processing remains in that jurisdiction. Resend provides confirmation and notification emails; its primary processing operations are in the United States and it uses subprocessors. Request current provider, hosting and processing-location details from us.

Before transferring personal information outside South Africa, AGT CIE must establish a permitted transfer basis and suitable protection under POPIA, including appropriate binding safeguards where relied on. Choosing to apply is not a blanket consent to every overseas transfer. Provider contracts and relevant notices must be confirmed before activation.

Retention and deletion

Applications are retained for no longer than two years from submission, and for a shorter period where they are no longer needed. At the end of that period, identifiable application records must be securely deleted or irreversibly de-identified. De-identified programme statistics may be kept where they can no longer reasonably identify you.

The current storage service stops using application records after 699 days and applies an automatic R2 deletion rule at 700 days, within the two-year maximum. Email job state and delivery events have 30-day deletion rules. The two-year maximum must also be applied to application copies, mailboxes and backups managed outside this storage service. Contact the Information Officer for a retention or deletion query.

Security and security incidents

The submission code validates answers on the server, limits request size, protects backend credentials from browser exposure and limits notification contents. The R2 bucket has public access disabled and storage requests require a server credential. AGT CIE must also maintain staff access controls, provider agreements and operating procedures. A website notice alone does not establish these safeguards.

AGT CIE must assess and maintain reasonable technical and organisational safeguards appropriate to the information held. Where a security compromise triggers POPIA notification duties, we will notify the Information Regulator and affected people as soon as reasonably possible, subject to lawful delays, and provide available information about the incident and protective steps.

Your rights and how to exercise them

Contact info@agt-cie.co.za with ‘Privacy request’ in the subject. Give enough detail to identify the request and, if available, your application reference. Do not email an ID document or medical information unless we arrange a suitable secure method. We may reasonably verify your identity before disclosing or changing records.

You may ask whether we hold your personal information and request access, correction, or deletion where permitted; object to processing on applicable grounds; and withdraw consent for future consent-based uses. Some requests are subject to legal exceptions and applicable POPIA/PAIA procedures. We will explain any restriction, fee or further step rather than promise unconditional deletion.

You may complain directly to the Information Regulator without first using our complaints process. The links below provide current complaints guidance and the prescribed rights-request forms.

Applicants under 18

AGT CIE training applications are for people aged 18 or older. We do not accept applications from children. Do not enter or submit a child’s personal information through this form. The date-of-birth check prevents under-18 applications from being submitted. If a child’s information is sent to us inadvertently, contact Stephen Jordan so it can be addressed and deleted appropriately.

Contact enquiries, marketing and website services

Contact enquiries collect your name, email and message to answer your request. These three fields are saved in private Cloudflare R2 storage and sent through Resend to info@agt-cie.co.za in a notification email. Your email address is used as the reply address. Contact enquiries do not receive an automatic confirmation email. Interest registrations collect an email address to respond to the interest expressed. An application or enquiry does not automatically subscribe you to unrelated promotional email. Electronic direct marketing requires the applicable POPIA permission and an accessible opt-out.

The website currently contains no first-party analytics or advertising trackers. Hosting services may generate technical and security logs. The contact page includes Google Maps, which connects to Google when loaded and may collect device, network and cookie information under Google’s own privacy terms. External links take you to services with their own notices. Application answers are not sent to Google Maps by our form code.

Changes to this notice

We will update this notice when the submission service, providers or processing purposes change. Material new uses require an appropriate lawful basis and notice, and new consent where needed. The date at the top shows the latest update.