Privacy Policy
How PEO handles the personal information of schools, learners, parents and staff under POPIA.
1. Who We Are
PEO - The School ERP is operated by Cabanga Africa Group (Pty) Ltd, Midrand, Gauteng. In this policy, "we" means Cabanga Africa Group (Pty) Ltd and "PEO" means the website at peo.cabanga.africa and the school system each school runs on it.
2. Two Roles Under POPIA
For the information a school captures in PEO about its learners, parents, guardians and staff, the school is the responsible party and we process that information on its behalf as its operator, only on its instructions and under the agreement we sign with the school.
For the information you send us through this website, such as a demo request or a sign-up form, we are the responsible party.
3. What This Website Collects
When you request a demonstration or sign up a school, we collect your name, role, email address and phone number, the school's name, province, town and learner numbers, and anything you write in the message box. We use it only to contact you, arrange a demonstration, prepare an agreement and set up the school.
4. What a School Keeps in PEO
A school decides what it records. Typically this includes learner records, admissions details, medical and emergency information, attendance, marks, behaviour and wellbeing notes, family contact details, fees and payments, and staff, leave and payroll records. Information about children and special personal information, such as health details, is treated with the extra care POPIA requires.
5. How We Protect It
Each school's information is kept in its own database. Access is controlled by role, so each user sees only what their role allows, and every change is recorded in an activity trail. Connections are encrypted, passwords are stored hashed, and daily backups are kept.
6. Who We Share It With
We do not sell personal information and we do not use school information for advertising. It is shared only with the services that make PEO work: our hosting provider, the email and SMS services a school chooses to use, and PayFast when a parent pays online. We disclose information to authorities only where the law requires it.
7. How Long We Keep It
Demo and sign-up requests are kept for as long as we are in discussion with the school and for twelve months after. A school's information is kept for as long as the school uses PEO. When a school leaves, we give it an export of its records and delete its database within 90 days, unless the law requires us to keep something longer.
8. Your Rights
Under POPIA you may ask to see the personal information held about you, have it corrected or deleted, and object to its use. For information a school holds, contact the school first; we will help it respond. For information you gave us directly, write to info@cabanga.africa. You may also complain to the Information Regulator at inforegulator.org.za.
9. Changes
This policy was last updated on 4 November 2026. When it changes, the date on this page changes with it.