Winning at Change

Privacy Policy

Last updated: 19 July 2026

1. Introduction

Winning at Change (Pty) Ltd ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African privacy legislation. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

2. Information We Collect

We may collect the following categories of personal information:

  • Contact information — name, email address, phone number, and organisation name provided when you contact us, subscribe to our newsletter, or register for a programme.
  • Purchase information — product or service purchased, order reference, and payment confirmation details. We do not store your card details — these are handled exclusively by PayFast.
  • Usage data — pages visited, time spent on site, and referring URLs, collected via analytics tools to help us improve our website.
  • Communications — messages you send us via the contact form or by email.

3. How We Use Your Information

We use your personal information to:

  • Process and fulfil your orders and deliver purchased products.
  • Send transactional emails (order confirmations, download links).
  • Send marketing communications (newsletters, event invitations) where you have opted in — you may unsubscribe at any time.
  • Respond to enquiries and provide customer support.
  • Improve our website, products, and services.
  • Comply with legal and regulatory obligations.

4. Sharing Your Information

We do not sell or rent your personal information to third parties. We may share it with:

  • PayFast — to process payments. PayFast's privacy policy is available at www.payfast.io/legal.
  • Email service providers — to send transactional and marketing emails on our behalf.
  • Analytics providers — to understand website usage (data is aggregated and anonymised where possible).
  • Legal authorities — where required by law or to protect our rights.

5. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Purchase records are retained for a minimum of 5 years for accounting and tax purposes. Marketing consent records are retained until you withdraw consent.

6. Your Rights (POPIA)

Under POPIA, you have the right to:

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your information (subject to legal retention requirements).
  • Object to the processing of your information for direct marketing.
  • Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at [email protected].

7. Cookies

Our website uses cookies to improve your browsing experience and to collect analytics data. You can control cookie settings through your browser. Disabling cookies may affect some website functionality.

8. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Payment transactions are processed over encrypted HTTPS connections via PayFast's PCI-DSS compliant infrastructure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or to exercise your rights, please contact:

Terms & Conditions Contact Us