Privacy Policy

Umami Academy (Pty) Ltd ("we") respects your privacy and processes personal information in accordance with the Protection of Personal Information Act, 2013 ("POPIA").

1. Information we collect

• Account: name, email, phone.
• Purchase: billing details, order history (card data is never stored by us).
• Usage: pages viewed, lessons completed, device/browser metadata.

2. Why we collect it

• To provide, secure and improve the service.
• To process payments and issue receipts.
• To send transactional emails (receipts, resets, course updates).
• To comply with legal obligations.

3. Third-party processors

We share the minimum data needed with these processors:

• Paystack — payments.
• Resend — transactional email delivery.
• Supabase — hosted database and authentication.
• Vercel / Lovable Cloud — hosting and static delivery.

4. Retention

We keep account and transaction data for as long as your account is active, plus 5 years for tax and audit compliance, then delete or anonymise it.

5. Your rights (POPIA)

You may request access, correction or deletion of your personal information, or object to processing, by emailing privacy@umami.academy.

6. Cookies

We use strictly necessary cookies (session, auth) and privacy-respecting analytics. You can control cookies through your browser settings.

7. Security

Data in transit is encrypted with TLS. Passwords are hashed. Access to production systems is restricted and logged.

8. Contact

Umami Academy (Pty) Ltd, 15 Loop Street, Cape Town, 8001, South Africa · privacy@umami.academy.