Privacy Policy
Last Updated: 02/Feb/2026
Effective Date: 02/Feb/2026
CANDID Academy (Pty) Ltd (“CANDID”, “we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal information is processed lawfully, fairly, and transparently.
This Privacy Policy explains how we collect, use, store, and protect personal information when you use the CANDID mobile application, website (including candidacademy.org), and related services (the “Platform”).
1. Legal Compliance
We process personal information in accordance with:
- The Protection of Personal Information Act (POPIA) – South Africa
- The General Data Protection Regulation (GDPR) – where applicable
- Other relevant data protection laws depending on jurisdiction
2. Information We Collect
2.1 Information You Provide
- Full name
- Email address
- Phone number
- Professional role
- Lodge affiliation
- Performance feedback submissions
- Profile photo (optional)
- Responses to surveys or questionnaires
2.2 Automatically Collected Information
- Device type
- IP address
- Usage analytics
- Login timestamps
- App interaction data
2.3 Performance & Feedback Data
The Platform collects:
- Guest-to-guide feedback
- Management performance assessments
- Peer reviews
- Aggregated scoring metrics
This data may be associated with identifiable individuals within a lodge context.
3. Special Category Data
CANDID does not intentionally collect medical or mental health records.
If users voluntarily disclose sensitive personal information in open feedback fields, they do so at their own discretion.
4. How We Use Your Information
We process personal information to:
- Operate and improve the Platform
- Provide performance analytics
- Deliver feedback reports
- Provide benchmarking insights
- Improve guide development tools
- Communicate service updates
- Comply with legal obligations
We do not sell personal information.
5. Lawful Basis for Processing
We rely on:
- Consent (when registering and using the Platform)
- Contractual necessity (lodge subscriptions)
- Legitimate interests (platform improvement and analytics)
- Legal compliance
6. Data Sharing
We may share data with:
- The lodge affiliated with the guide
- Platform service providers (hosting, analytics, payment processors)
- Legal authorities if required by law
We do not share identifiable data for advertising purposes.
7. Aggregated & Anonymised Data
CANDID may create anonymised, aggregated industry reports.
These reports:
- Do not identify individual guides
- Do not identify specific lodges without written consent
- May be used for research, benchmarking, or marketing
8. Data Storage & Security
We implement reasonable technical and organisational measures including:
- Secure cloud hosting
- Encrypted data transmission (SSL/TLS)
- Access control restrictions
- Role-based data permissions
No system is 100% secure, but we actively mitigate risks.
9. International Data Transfers
If data is transferred outside South Africa, we ensure:
- Adequate protection standards
- Contractual safeguards
- Compliance with GDPR where required
10. Data Retention
We retain personal information:
- For as long as an account remains active
- For a reasonable period after termination
- As required for legal or regulatory compliance
Users may request deletion subject to contractual obligations with lodges.
11. Your Rights
Subject to applicable law, users may:
- Access their personal data
- Correct inaccurate information
- Request deletion
- Object to processing
- Withdraw consent
- Request data portability
Requests may be submitted to: hello@candidacademy.org
12. Children
The Platform is not intended for individuals under 18.
13. Updates to This Policy
We may update this Privacy Policy from time to time.
Users will be notified of material changes.
14. Contact Information
CANDID Academy (Pty) Ltd
Email: hello@candidacademy.org
Website: https://candidacademy.org