Privacy Policy

Welcome. We’re The Footballer’s Lab, and we run this learning platform so you can take our courses online. We take your privacy seriously, but we’ll explain everything in plain language – no legal jungle.

What information do we collect?

When you sign up and use our learning site, we collect only what we need to make things work:

• Your name & email address – so we know who you are and can send you course updates.
• Username & password – to keep your account safe.
• Course progress, quiz scores, certificates – so you don’t lose your place and can prove what you’ve learned.
• Billing details – when you pay for a course via Payfast (name, email, address). We never see your full card details – Payfast handles that securely.
• Technical stuff – like your IP address and which browser you use (standard for any website).

That’s it. We don’t ask for medical info, ID numbers, or emergency contacts – that’s for our in‑person work, not here.

How do we use your information?

We use your info to:

• Set up and manage your learner account.
• Let you access courses and track your progress.
• Issue certificates when you finish.
• Send you important platform messages (e.g. password resets, course reminders).
• Process payments through Payfast.
• Improve the platform (e.g. see which courses are popular).

We will never sell your personal information. Ever.

What’s our legal basis? (POPIA speak, made simple)

South Africa’s POPIA law says we need a valid reason to use your info. Here’s ours:

• Contract – you sign up for a course, we provide it. That’s a contract.
• Consent – if we ever want to send you marketing emails or use non‑essential cookies, we’ll ask you first (tick box, not pre‑ticked).
• Legitimate interest – things like keeping the platform secure and analysing usage to make it better, as long as your rights aren’t harmed.

Do you share my information with others?

Only when necessary, and always carefully. Here are the services we currently use:

• Xneelo – hosts our entire website, learning platform, and learner data (WordPress, Tutor LMS, databases). Xneelo is a South African hosting provider that acts as an “operator” under POPIA. Their data processing terms are included in their Terms of Service.
• Google Cloud – we use Google’s Identity Platform only for the sign‑in/authentication step when you create an account or log in. Google does not store your course progress, quiz results, or other learning data – only the authentication credentials.
• Payfast – processes payments. Payfast’s privacy policy.
• Brevo – sends our emails (account notifications, password resets). They have data protection agreements in place.
• H5P – runs interactive content like quizzes and flashcards. H5P does not collect or share learner data on its own.
• Legal requirements – if a court or the Information Regulator demands it, we have to comply.

We don’t share your info with anyone else for marketing or random purposes.

What about cookies and tracking?

We use essential cookies to keep you logged in and remember your course progress. For non‑essential cookies (e.g. analytics), we’ll show you a cookie banner when you first visit – you can accept or decline. No hard feelings.

How long do we keep your info?

We keep your personal information as long as your account is active, plus a reasonable period afterwards (around 2–3 years) in case you want to come back. If you haven’t logged in for 3 years, we’ll delete your account and all associated data.

Certificates you’ve earned may be kept longer for verification purposes, but without your other personal details.

Your rights under POPIA

You have the right to:

• See what info we hold about you – just ask.
• Fix anything that’s wrong – update your name or email.
• Delete your account and all your data – unless we’re legally required to keep it (e.g. for tax reasons).
• Object to how we use your info (e.g. for analytics).
• Withdraw consent any time – for marketing or cookies.

To exercise any of these rights, email our Information Officer: Ahmed Parker at ahmed@thefootballerslab.com. We’ll usually respond within 30 days.

A note about age (under‑18 learners)

Our courses are designed for adults, and we don’t actively target anyone under 18. If you are under 18, you may not register for an account without the consent of a parent or legal guardian.

We don’t ask for your age during sign‑up, but if we discover that someone under 18 has registered without proper consent, we will delete their account and all their information as soon as we become aware. Please help us by being honest – or parents, please supervise your child.

Photos and videos? Only for in‑person courses

We do not take photos or videos of online learners for marketing or any other purpose. If you sign up for an in‑person course through this website, we’ll ask for your separate, explicit consent (a checkbox) before taking any images. That consent is collected on the in‑person registration form – not on this page.

Where is my data stored?

Almost all your data stays in South Africa (Xneelo’s local servers). The only exception is the Google Cloud authentication piece – that may involve servers outside SA, but Google provides POPIA‑compliant safeguards. If we ever use another provider outside SA, we’ll make sure they meet POPIA standards.

What if there’s a data breach?

We take security seriously – passwords, encryption, limited access. If a breach ever happens that could harm you, we’ll notify the Information Regulator and you personally, as required by law.

How to contact us (or complain)

---

That’s it – human, clear, and POPIA‑friendly. If you have any questions, just drop Ahmed an email – he actually replies.