1 Responsible party and enquiries
Anda Penguin (Pty) Ltd, registration number 2026/368271/07, is responsible for personal information processed for Anda Penguin’s services. Privacy requests may be sent to [email protected].
2 Information and purposes
We process contact details and correspondence supplied when you enquire, and order details such as email address, order reference, purchased product and payment status when you buy. These are used to answer enquiries, fulfil purchases, provide support, keep required records and investigate payment or security problems. Website infrastructure may process technical connection and security information. Any additional analytics or tracking will be disclosed before it is introduced.
Member accounts and essential cookies
Member accounts use an email address, email-verification records and a securely salted password hash. We do not store readable passwords or card details. Essential secure session cookies keep you signed in for up to seven days. Session and verification tokens are stored as hashes. Password-reset links expire and work once; completing a reset signs out previous sessions. Cloudflare hosts account records and delivers verification and reset emails. PayFast processes payment details and provides subscription references, payment status and billing-period information used to grant the correct member access. We keep consent records for the agreed plan and recurring billing. Contact [email protected] to request account assistance or deletion, subject to required transaction recordkeeping. No child account is needed.
3 Children and device storage
Adults should place orders and contact us on children’s behalf. Do not send unnecessary identifying information about a child. Learning progress and stars use browser local storage in the current website implementation; clearing browser data may erase this progress. Any collection or sharing of identifiable child information requires an appropriate lawful basis and, where required, consent from a competent person. A parent or guardian can contact us about information concerning their child.
4 Service providers and external sites
Order and payment information may be processed by payment, hosting and support providers as needed to deliver the service, subject to appropriate safeguards. PayFast handles payments offered through its payment flow. Links or embedded content from YouTube and Patreon may involve those providers processing information under their own notices. Cross-border processing must meet applicable POPIA requirements.
5 Retention and protection
We retain personal information only for the purpose for which it is needed, applicable legal recordkeeping requirements or a lawful dispute need, then deleted or de-identified. We limit access to authorised people who need it. Do not send card details or banking passwords by email.
6 Rights and complaints
You may request access to or correction of your personal information, request deletion where applicable, object to processing where the law permits, or withdraw consent for processing based on consent. Withdrawal does not invalidate earlier lawful processing. We may need to verify your identity proportionately. You may complain to South Africa’s Information Regulator at www.inforegulator.org.za. Promotional communications requiring consent must provide a way to opt out.