Privacy Policy

1. Who we are

Certiva (Pty) Ltd (Registration No. 2026/338141/07) is the responsible party for personal information processed through certiva.co.za. We are domiciled in Cape Town, South Africa. Contact: hellocertiva@gmail.com

2. Information we collect

We collect the following personal information when you register and use Certiva:

• Full name
• Email address
• HPCSA registration number
• Payment information (processed by PayFast — we do not store card details)
• Course completion records and assessment scores
• Exam preparation data (FCPsych and FCS Primaries) — quiz session records, question responses, scores, and subtopic performance analytics
• Usage data (pages visited, time spent on platform)

3. Why we collect it

We process your personal information for the following purposes:

• To create and manage your account
• To process subscription payments
• To generate CPD certificates of completion
• To record and display your CPD progress
• To communicate with you about your account and new courses
• To provide personalised exam preparation analytics and weakness tracking
• To comply with our obligations to accreditation bodies

4. Legal basis for processing

We process your personal information on the following grounds under POPIA:

• Performance of a contract (your subscription agreement)
• Legitimate interests (platform improvement and security)
• Compliance with legal obligations

5. How we store and protect your information

Your data is stored securely on Supabase infrastructure hosted within secure cloud environments. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. Payment data is handled exclusively by PayFast and is not stored on Certiva's systems.

6. Sharing your information

We do not sell your personal information. We may share it with:

• PayFast — for payment processing
• Supabase — for data storage and authentication
• Accreditation bodies (SAMA, UCT) — where required to verify course completions
• Law enforcement or regulators — where required by law

7. Your rights under POPIA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Object to processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at hellocertiva@gmail.com.

8. Retention

We retain your personal information for as long as your account is active, and for a reasonable period thereafter for legal and business purposes. CPD completion records may be retained for up to 5 years to support professional verification.

9. Cookies

Certiva uses only functional cookies necessary for authentication and session management. We do not use advertising or tracking cookies.

10. Exam preparation content disclaimer

The exam preparation content on Certiva — including all practice questions, mock papers, and performance analytics — is independent self-assessment material produced by Certiva. It is not affiliated with, endorsed by, or accredited by the College of Medicine of South Africa (CMSA), the Health Professions Council of South Africa (HPCSA), or any other examining or professional body. All questions are original content written in a style consistent with CMSA past papers and are intended for self-assessment purposes only. Certiva makes no representations as to the accuracy, completeness, or fitness of this content for any particular purpose, including examination success.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email. Continued use of the platform constitutes acceptance of the revised policy.