
Privacy Policy
Effective Date: 19 April 2025
Last Updated: 19 April 2025
Yellow Tree Reading Academy ("we", "us", "our") is committed to safeguarding the privacy of your personal information in accordance with the Protection of Personal Information Act (POPIA) in South Africa and the General Data Protection Regulation (GDPR) in the European Union.
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, purchase digital products, or engage with our services.
1. Who We Are
Yellow Tree Reading Academy is an online educational platform offering downloadable courses, books, games, and instructional resources.
📍 Based in South Africa
🌐 Website: www.yellowtreereading.com
📧 Contact: tania@yellowtreereading.com
2. What Information We Collect
We may collect the following types of personal information (POPIA) / personal data (GDPR):
2.1. Information You Provide Voluntarily
-
Full name
-
Email address
-
Phone number (optional)
-
Billing address
-
Account username and password
-
Any personal messages or correspondence sent to us
2.2. Automatically Collected Data
-
IP address
-
Browser type and version
-
Operating system
-
Device type
-
Referring URL
-
Pages visited and time spent
-
Cookies and similar technologies (see Section 8)
3. Lawful Basis for Processing (GDPR Compliance)
We process your data only when there is a lawful basis to do so, including:
-
Consent (e.g. subscribing to newsletters)
-
Contract (e.g. fulfilling a purchase or account registration)
-
Legal obligation (e.g. tax and accounting requirements)
-
Legitimate interests (e.g. website improvement, fraud prevention)
4. Why We Collect Your Information
We use your information to:
-
Create and manage your account
-
Fulfill orders and grant digital access
-
Provide customer support
-
Send important updates and notifications
-
Improve our website and offerings
-
Send newsletters and promotional material (with your consent)
5. Sharing and Disclosure
We do not sell or trade your personal data. We may share your data with trusted third parties strictly for the purposes outlined above:
-
Payment gateways (e.g. PayFast, Stripe)
-
Email and CRM tools (e.g. Mailchimp)
-
Analytics providers (e.g. Google Analytics)
-
Hosting and IT service providers
All third parties are contractually bound to protect your data under POPIA and/or GDPR requirements.
6. Your Rights (POPIA & GDPR)
You have the following rights regarding your personal data:
✅ Access – Request details about the personal data we hold
✅ Correction – Update or amend inaccurate information
✅ Deletion – Request erasure of your data (“right to be forgotten”)
✅ Objection – Object to processing for direct marketing or legitimate interest
✅ Portability – Request a copy of your data in a structured, commonly used format
✅ Withdraw Consent – Where processing is based on consent
To exercise any of these rights, contact tania@yellowtreereading.com.
We will respond within 30 days, as per POPIA and GDPR timelines.
7. Data Retention
We retain your personal data only for as long as necessary:
-
To provide our services
-
To comply with legal or tax obligations
-
To resolve disputes and enforce agreements
You may request deletion of your account and data at any time.
8. Cookies and Tracking Technologies
We use cookies to:
-
Keep you logged in
-
Improve user experience
-
Analyse site traffic
-
Deliver targeted content or promotions
You can adjust your cookie settings in your browser at any time or opt out via the cookie banner on our website.
9. International Data Transfers
If you are located outside South Africa, your data may be transferred and stored in South Africa or another jurisdiction with appropriate safeguards in place (e.g., Standard Contractual Clauses, secure servers, encrypted storage).
We ensure all cross-border transfers comply with POPIA, GDPR, and other applicable laws.
10. Data Security
We implement appropriate technical and organisational measures to ensure:
-
Encryption of data during transmission (SSL)
-
Secure storage and access controls
-
Staff awareness and confidentiality agreements
-
Regular security reviews and system monitoring
11. Children’s Privacy
Our services are not directed to children under 13. We do not knowingly collect personal data from minors without parental consent. If we discover such data has been collected, it will be deleted immediately.
12. Data Breach Notification
Should a data breach occur that may compromise your personal data, we will notify affected users and relevant authorities within 72 hours, as required by law.
13. Changes to This Policy
We may update this Privacy Policy to reflect legal, operational, or technological changes. The latest version will always be posted here. If significant changes occur, we will notify you by email or via the website.
14. Contact Us
To ask questions or exercise your rights, contact:
Data Protection Officer
📧 tania@yellowtreereading.com
📍 South Africa
.png)