Privacy Policy
Last updated: January 2025
This Privacy Policy explains how FundiMatch ("we", "us", "our") collects, uses, and protects personal information in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA). By using the FundiMatch platform or website, you consent to the practices described in this policy.
1. Information We Collect
We collect the following categories of personal information:
- Identity information: name, surname, date of birth, gender
- Contact information: email address, phone number
- Assessment data: responses to psychometric assessment questions, assessment results and reports
- Usage data: pages visited, time spent on the platform, device and browser type
- Payment information: processed securely by our payment provider — we do not store card details
- Institutional or organisational data: where you register as or on behalf of an institution or funder
2. How We Use Your Information
We use your personal information to:
- Deliver and improve our psychometric assessment services
- Generate and provide your personalised assessment reports
- Process payments and manage your account
- Communicate with you about your account, assessments, or enquiries
- Comply with legal and regulatory obligations
- Improve the FundiMatch platform and user experience
- Share aggregated, anonymised data with institutions or funders (your individually identifiable data is never shared without your consent)
3. Legal Basis for Processing
We process your personal information on the following grounds:
- Consent: You have given consent to our assessment and privacy terms
- Contract performance: Processing is necessary to deliver the services you've purchased
- Legal obligation: Where required to comply with applicable law
- Legitimate interest: For platform improvement and security, where this doesn't override your rights
4. Sharing Your Information
We do not sell your personal information. We may share it with:
- Service providers: Payment processors, hosting providers, and email delivery services, who are contractually bound to protect your data
- Institutions or funders: Only where you have explicitly consented to share your assessment results with them
- Law enforcement or regulators: Where required by law
5. Data Retention
We retain your personal information for as long as your account is active, or as long as necessary to provide our services. Assessment data is retained for 5 years unless you request deletion. You may request deletion of your data at any time by contacting us.
6. Your Rights Under POPIA
As a data subject, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Object to certain processing activities
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact us at support@fundimatch.co.za.
7. Cookies
We use cookies to maintain your session, remember your preferences, and gather anonymous analytics about how the platform is used. You may disable cookies in your browser settings, although this may affect certain features of the platform.
8. Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. All data is transmitted over HTTPS. Payment processing is handled by PCI-DSS compliant providers.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our platform. Continued use of FundiMatch after the effective date of changes constitutes acceptance.
10. Contact Us
For questions, requests, or complaints about this Privacy Policy or our data practices, contact: