Privacy policy

IMJ OHS Compliance Training (Pty) Ltd respects your privacy. This policy explains what personal information we collect through this website, why we collect it, what we do with it, and the rights you have in relation to it. It is written to comply with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

For the purposes of POPIA, the responsible party is:

Registered name

IMJ OHS Compliance Training (Pty) Ltd

Registration number

2026/620007/07

Address

1332 Dr. Belcher Road, Mangaung Resources Centre Building, Heidedal, Bloemfontein, 9301

Email

info@imjtraining.co.za

Website

www.imjtraining.co.za

Information Officer

[To be appointed and registered with the Information Regulator]

2. What personal information we collect

We only collect what you give us. This website has no user accounts, no online payments and no advertising or behavioural tracking.

Information you submit through the quote request form

• First name and surname
• Email address
• Contact number
• Company name and your position
• Type of operation and province
• Courses you are enquiring about, number of delegates and preferred timeframe
• Preferred delivery method
• Anything else you choose to type into the message field

Information collected automatically

Our hosting infrastructure records standard technical data such as IP address, browser type and the pages requested. This is used for security and to keep the site running, not to build a profile of you.

Information we do not collect through this website

We do not collect identity numbers, banking details, medical information or any other special personal information through this website. Where a course requires delegate identity numbers for registration and certification, or a health declaration for physically demanding practical training, that information is collected separately and directly from your organisation as part of the booking process, not through this site.

3. Why we process it

• To read, understand and respond to your enquiry
• To prepare and send you a written training quote
• To arrange, schedule and deliver training you book with us
• To issue certification and maintain the training records the law requires us to keep
• To comply with our own legal, tax and accounting obligations

We do not sell your information. We do not use it for automated decision-making or profiling. We will not add you to a marketing list on the strength of a quote request alone.

4. Our lawful basis for processing

Under section 11 of POPIA we rely on the following justifications:

• Consent. You choose to submit the form and tick the consent box before doing so.
• Necessary to conclude or perform a contract. We cannot quote or deliver training without your details.
• Legal obligation. Training and certification records must be retained and produced on request.
• Legitimate interests. Keeping the website secure and responding to business enquiries.

5. Who we share it with

We share personal information only where it is necessary, and only with:

• Our facilitators and assessors, to the extent needed to deliver and assess your training
• Accreditation and moderation bodies, where a course is credit-bearing and learner details must be registered
• Service providers who host our website and email, who process data on our instruction only
• Our accountants and auditors, and SARS, where required
• Any authority entitled to it by law, court order or valid regulatory demand

We do not transfer personal information outside South Africa other than through standard hosting and email infrastructure. Where a service provider processes data outside the Republic, we require safeguards at least equivalent to those POPIA demands.

6. How long we keep it

• Enquiries that do not become bookings: up to 12 months, then deleted.
• Client and booking records: at least 5 years, in line with tax and company record-keeping requirements.
• Training and certification records: retained for as long as the certificate remains relevant to a delegate's competence and any statutory retention period that applies, so that records can be reproduced for audits and inspections.

[Retention periods to be confirmed against the client's own record-keeping policy and any accreditation body requirements before this page is published.]

7. How we protect it

• The website is served over an encrypted HTTPS connection
• Form submissions are protected against cross-site request forgery
• Access to enquiry data is limited to the people who need it to do their job
• We keep the underlying software and dependencies patched

No system is perfectly secure. If a security compromise occurs where there are reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify you and the Information Regulator as soon as reasonably possible after discovering it, as section 22 of POPIA requires.

8. Cookies

This website uses strictly necessary cookies only. They exist to keep your session working and to protect the enquiry form against cross-site request forgery. They do not track you across other websites.

• Session cookie. Keeps your browsing session consistent while you move between pages.
• CSRF token cookie. A security measure that confirms a form submission genuinely came from this site.

We do not currently run analytics, advertising or social media tracking cookies. If that changes, this policy will be updated and consent will be requested before any non-essential cookie is set.

9. Your rights

Under POPIA you have the right to:

• Ask what personal information we hold about you and request a copy of it
• Ask us to correct information that is inaccurate, irrelevant, misleading or out of date
• Ask us to delete or destroy information we no longer have a lawful reason to keep
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting processing already carried out
• Lodge a complaint with the Information Regulator

To exercise any of these, email info@imjtraining.co.za. We may need to verify your identity before acting on a request. We will respond within a reasonable period and, where a request is refused, we will tell you why.

Requests for access to records may also be made under the Promotion of Access to Information Act 2 of 2000. Our PAIA manual is available on request.

10. Complaints

Raise it with us first and we will try to resolve it. If you are not satisfied, you may complain to:

Body

Information Regulator (South Africa)

Email

complaints.IR@justice.gov.za

Website

inforegulator.org.za

11. Changes to this policy

We may update this policy as our services or the law change. The date at the top of this page shows when it was last revised. Material changes will be brought to your attention where we are able to contact you.