Privacy Policy

Effective date: 2 September 2026

This Privacy Policy explains how DYNA Training (Pty) Ltd (“DYNA”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information. It also explains the rights available to individuals and organisations whose personal information we process.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Promotion of Access to Information Act 2 of 2000 (“PAIA”) and other applicable South African laws.

Who we are

DYNA is a South African provider of management, supervisory, leadership, skills-development and learnership programmes. DYNA forms part of Workforce Training and Consulting and the wider Workforce Holdings group of companies.

For personal information for which DYNA determines the purpose and means of processing, DYNA is the responsible party under POPIA. In some circumstances, a client, employer, funder, regulator, accreditation body or another Workforce group company may be a separate or joint responsible party. Their own privacy notices may also apply.

This policy applies to information collected through dyna-training.co.za, our enquiry and quotation forms, assessments and surveys, learner platforms, email, telephone, social media, in-person interactions and the delivery and administration of our training services.

Personal information we collect

The personal information we collect depends on how you interact with us and may include:

• Identity and contact details, including your name, surname, identity or passport number where required, date of birth, address, email address, telephone number and signature.
• Business and employment details, including your employer, company name, job title, department, manager or supervisor, region and business contact details.
• Course-enquiry information, including the programme or course you are interested in, preferred region or dates, quotation requirements and the contents of your message.
• Learner and training records, including applications, registrations, attendance, participation, assignments, assessments, results, portfolios of evidence, certificates, qualifications, prior learning, progress and feedback.
• Education and professional information, including school and tertiary history, qualifications, licences, memberships and supporting documents.
• Demographic and statutory information required for learnership, employment-equity, accreditation, SETA, QCTO, SAQA, B-BBEE or other lawful reporting purposes.
• Financial and transaction information, including quotations, invoices, payment status, banking details where required and records needed for accounting, audit or tax purposes. Card payments, if offered, are processed by authorised payment providers and DYNA does not intentionally store complete payment-card details.
• Special personal information where necessary and lawful, such as disability, health or accessibility information required to provide reasonable accommodation, and race or gender information required for authorised training or statutory reporting.
• Communications and preference information, including emails, telephone enquiries, complaints, consent records, marketing preferences and survey responses.
• Photographs, audio, video, testimonials or comments where these are created during training, events or feedback activities and where an appropriate lawful basis, notice and consent are in place.
• Technical and usage information, including your IP address, browser and device type, operating system, referring page, pages viewed, approximate location, timestamps, cookie identifiers and interactions with the website.

If you provide personal information about another person, you confirm that you are authorised to do so and that the person has been informed of the relevant processing.

How we collect information

We may collect personal information:

• directly from you when you complete a form, request a quotation, register for a programme, submit an assessment, complete a survey, provide feedback, contact us or attend training;
• from your employer, sponsor, client organisation, training provider, facilitator, assessor, moderator or authorised representative;
• from relevant SETAs, QCTO, SAQA, government bodies, accreditation bodies and verification providers where lawful;
• from Workforce group companies and regional DYNA offices where necessary to respond to your request or deliver services;
• automatically through cookies, server logs and website analytics technologies; and
• from public sources or third parties where permitted by law and reasonably necessary for a legitimate business purpose.

Why we process personal information

We process personal information only for specific and lawful purposes, which may include:

• responding to enquiries and requests for quotations, dates, brochures or programme information;
• registering learners and delivering, administering and evaluating training, learnerships, assessments, moderation and certification;
• communicating with learners, clients, employers, sponsors, facilitators and other authorised stakeholders;
• meeting contractual obligations and taking steps requested before entering into a contract;
• maintaining attendance, assessment, certification, quality-assurance and accreditation records;
• complying with legal, tax, accounting, employment-equity, skills-development, accreditation and regulatory obligations;
• submitting required information to SETAs, QCTO, SAQA, regulators, clients, employers or funders;
• providing reasonable accommodation and supporting learner welfare and safety;
• processing invoices, payments, refunds and financial records;
• conducting surveys, analysing anonymous or aggregated feedback and improving our programmes, website and service delivery;
• publishing testimonials, images or success stories where appropriate consent or another lawful basis exists;
• protecting our systems, learners, staff, clients and rights, and preventing fraud, misuse, security incidents and unlawful activity;
• establishing, exercising or defending legal claims; and
• sending relevant marketing communications where permitted by law and respecting opt-out requests.

Legal grounds for processing

Depending on the circumstances, we rely on one or more grounds permitted by POPIA:

• your consent;
• processing necessary to enter into or perform a contract with you;
• processing required by law;
• processing necessary to protect your legitimate interests;
• processing necessary for DYNA’s or a third party’s legitimate interests, provided your privacy rights do not override those interests; and
• another ground authorised by POPIA, particularly for special personal information or children’s information.

When information is required

Fields marked as required must be completed so that we can process the relevant enquiry, registration, assessment or service. Other information is voluntary. If you do not provide information that is reasonably necessary, we may be unable to respond fully, provide a quotation, enrol you, deliver training, issue a certificate or meet a legal or accreditation requirement.

Cookies and website analytics

Our website uses cookies and similar technologies. Cookies are small files placed on your browser or device. They may be session cookies, which expire when you close your browser, or persistent cookies, which remain for a set period.

We may use the following categories:

• Strictly necessary cookies that enable core website functions, security and form operation.
• Preference cookies that remember choices and improve convenience.
• Analytics cookies that help us understand website traffic, performance and how visitors use the site.
• Advertising or social-media cookies, where enabled, that measure campaigns or support embedded third-party features.

The website uses Google Tag Manager to manage website tags. Depending on the tags configured and your consent choices, those tags may activate analytics services such as Google Analytics. These providers may process technical identifiers and usage information on our behalf or under their own privacy terms.

You can manage non-essential cookies through any cookie control presented on the website and through your browser settings. Blocking some cookies may affect how parts of the site function.

Who we share information with

We may share personal information only where necessary and lawful, including with:

• Workforce Holdings group companies, Workforce Training and Consulting, DYNA regional offices and related service entities;
• your employer, sponsor, client organisation or authorised representative where they arrange or fund training;
• facilitators, assessors, moderators, invigilators, training venues and other parties involved in programme delivery;
• SETAs, QCTO, SAQA, government departments, accreditation or professional bodies and verification agencies;
• technology and operational service providers, including website hosting, cloud storage, learner-management systems, email delivery, CRM, analytics, cybersecurity, document management and IT support providers;
• banks, payment processors, auditors, accountants, insurers, lawyers and other professional advisers;
• regulators, courts, law-enforcement agencies or public authorities when required by law or necessary to protect rights and safety; and
• a buyer, investor or successor in connection with a lawful merger, restructuring, financing or sale of all or part of a business, subject to appropriate confidentiality and privacy safeguards.

Service providers that process personal information for us are expected to use it only for authorised purposes, maintain confidentiality and apply appropriate security safeguards. We do not sell personal information as a business activity.

Cross-border transfers

Some service providers, platforms, Workforce group entities or recipients may be located outside South Africa. When personal information is transferred across borders, we will take reasonable steps to ensure that the transfer complies with section 72 of POPIA, including by relying on adequate data-protection laws, binding agreements, consent or another permitted legal ground.

Special personal information and children

We process special personal information only when it is necessary, relevant and authorised by POPIA or another law. This may include information required for learner accommodation, safety, accreditation, transformation or statutory reporting. Access is limited to people who reasonably need it.

Where a learner is under 18 or otherwise regarded as a child under POPIA, we process the child’s personal information only with the consent of a competent person or where another lawful authorisation applies. Our general website is not directed at children acting independently, and a parent, guardian, employer or authorised sponsor should assist where appropriate.

Security and information incidents

We use appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised destruction, unlawful access and unlawful processing. These measures may include access controls, staff confidentiality obligations, secure hosting, backups, monitoring, security updates and contractual safeguards with service providers.

No internet transmission or storage system can be guaranteed to be completely secure. If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will investigate and notify the Information Regulator and affected data subjects as required by POPIA.

How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to meet contractual, accreditation, audit or legal requirements, to resolve disputes and to protect legitimate interests. Retention periods vary according to the type of record and applicable SETA, QCTO, SAQA, tax, employment, contractual and limitation-period requirements.

When information is no longer required, we will securely delete, destroy or de-identify it, unless continued retention is permitted or required by law. De-identified or aggregated information that can no longer reasonably identify a person may be retained for statistics, quality assurance and service improvement.

Your rights

Subject to POPIA and any lawful limitations, you may:

• ask whether we hold personal information about you and request access to it;
• request correction or updating of inaccurate, incomplete, excessive, outdated, misleading or unlawfully obtained information;
• request deletion or destruction where the information is no longer authorised to be retained;
• object, on reasonable grounds, to certain processing;
• withdraw consent where processing is based on consent, without affecting processing that occurred before withdrawal;
• object to direct marketing and unsubscribe from electronic marketing communications;
• ask for information about the identity of third parties that have had access to your information where POPIA provides this right;
• not be subject to certain decisions based solely on automated processing where POPIA applies; and
• lodge a complaint with the Information Regulator or pursue another remedy available by law.

We may need to verify your identity before processing a request. Some rights are not absolute; for example, we may retain information where required by law or where it is needed to establish, exercise or defend a legal claim.

Direct marketing

We may send information about DYNA programmes, dates, events or related services where POPIA and other applicable marketing laws permit it. Where consent is required, we will request it. You may opt out at any time by using the unsubscribe method in the communication or by contacting us. Opting out of marketing does not prevent us from sending necessary service, learner or administrative communications.

Third-party websites and embedded services

Our website may link to or embed services provided by third parties, including social-media platforms, maps, video providers, learner platforms and Workforce group websites. Those third parties may collect information under their own privacy policies. DYNA is not responsible for the privacy practices of third-party services that it does not control, and you should review their notices before providing information.

Changes to this policy

We may update this Privacy Policy to reflect changes to our services, technology, legal requirements or processing activities. The current version will be published on the website with its effective date. Material changes may also be communicated through an appropriate channel.

Contact us

For privacy questions, objections, access or correction requests, or concerns about how personal information is handled, contact:

Complaints to the Information Regulator

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa):

• Website: https://inforegulator.org.za/
• Email: enquiries@inforegulator.org.za
• Telephone: 010 023 5200
• Toll-free: 0800 017 160