Privacy Policy
Last Updated: January 2025
At Eswatini Standards Authority (ESWASA), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, website, and training programmes.
1. Information We Collect
We collect information that you provide directly to us, including:
Personal Information:
- Full name, identification number, and contact details
- Email address, phone number, and physical address
- Organisation name and position
- Payment information for training courses
- Educational and professional background
Automatically Collected Information:
- IP address and browser type
- Website usage data and cookies
- Device information and operating system
2. How We Use Your Information
We use the information we collect for the following purposes:
- To process training applications and registrations
- To provide certification services and issue certificates
- To communicate with you about our services and updates
- To process payments and maintain financial records
- To improve our website and services
- To comply with legal obligations and regulatory requirements
- To send important notices about course changes or cancellations
3. Legal Basis for Processing
We process your personal information based on:
- Contractual Necessity: To fulfil our training and certification services
- Legal Obligations: To comply with Eswatini laws and regulations
- Legitimate Interests: To improve our services and operations
- Consent: Where required by law, we obtain your explicit consent
4. Information Sharing and Disclosure
We may share your information with:
- Accredited training partners and instructors
- Government authorities as required by law
- Payment processors for transaction purposes
- Service providers who assist in our operations
We do not sell your personal information to third parties.
5. Data Retention
We retain your personal information for as long as necessary to:
- Fulfil the purposes for which it was collected
- Comply with legal and regulatory requirements
- Maintain accurate certification records
- Resolve disputes and enforce our agreements
Training and certification records are typically retained for a minimum of 7 years.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- Secure servers and encrypted data storage
- Access controls and authentication procedures
- Regular security assessments and updates
- Staff training on data protection
7. Your Rights
Under Eswatini data protection laws, you have the right to:
- Access your personal information
- Correct inaccurate or incomplete data
- Request deletion of your personal information
- Object to processing of your data
- Request restriction of processing
- Data portability where applicable
8. Cookies and Tracking Technologies
Our website uses cookies to:
- Enhance user experience and website functionality
- Analyse website traffic and usage patterns
- Remember your preferences and settings
You can control cookie settings through your browser preferences.
9. International Data Transfers
As the national standards body, we primarily process data within Eswatini. Any international transfers of personal data will be conducted in compliance with Eswatini data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date.
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children without parental consent.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
- Eswatini Standards Authority
- Data Protection Officer
- P.O. Box 1399, Matsapha, Eswatini
- Tel: +268 2518 4610
- Fax: +268 2518 4526
- Email: privacy@eswasa.co.sz
Complaints: If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Eswatini Data Protection Authority.