Privacy Policy

Last updated: 30 July 2026

Brainy X respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information Brainy X may collect, how it is collected, why it is used, when it may be shared, how it is protected and what rights you have in relation to your personal information.

This Privacy Policy must be read together with the Brainy X Terms and Conditions and Refund Policy.

1. Who We Are

Responsible party: Yvette Conradie, a sole proprietor trading as Brainy X
Trading name: Brainy X
Website: brainy-x.com
Email: sales@brainy-x.com
Telephone and WhatsApp: +27 69 412 0742
Physical address: 15 Reinette Street, The Reeds, Centurion, 0158, South Africa

For purposes of the Protection of Personal Information Act 4 of 2013, commonly referred to as POPIA, Yvette Conradie trading as Brainy X is the responsible party for personal information processed through the Brainy X website and business operations.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected when you:

  • visit or use the Brainy X website;
  • browse products or sample materials;
  • place an order;
  • make a payment;
  • download a purchased product;
  • contact Brainy X by email, telephone or WhatsApp;
  • request customer support;
  • submit a complaint or refund request;
  • interact with embedded content or external links; or
  • otherwise provide personal information to Brainy X.

This Privacy Policy does not govern the independent privacy practices of external websites or services that Brainy X does not control.

3. Personal Information We May Collect

Depending on how you use the website and services, Brainy X may collect the following personal information:

  • name and surname;
  • email address;
  • telephone or WhatsApp number;
  • billing details required during checkout;
  • school name, where voluntarily supplied;
  • grade, subject, textbook, term and language selections;
  • products viewed, ordered or downloaded;
  • order numbers and purchase history;
  • payment status, amount and transaction reference information;
  • messages, enquiries, complaints and customer-support correspondence;
  • information supplied in connection with a refund or delivery problem;
  • download and delivery records;
  • IP address;
  • browser, device and operating-system information;
  • website-session and cookie information;
  • the date and time of website activity;
  • referring website information, where available; and
  • any other information that you voluntarily provide.

Brainy X does not intentionally collect more personal information than is reasonably necessary for its legitimate business and legal purposes.

4. Information Brainy X Does Not Store

Brainy X does not store customers’ full bank-card numbers, banking passwords, one-time PINs or online-banking login details on the Brainy X website.

Payment information required to complete a transaction is processed by PayFast or another payment provider identified during checkout, according to that provider’s own privacy and security practices.

5. How Personal Information Is Collected

Brainy X may collect personal information directly from you when you:

  • complete an order or checkout form;
  • make a payment;
  • contact Brainy X;
  • request support;
  • submit a refund request or complaint;
  • provide information needed to deliver or correct an order; or
  • voluntarily submit information through the website or another communication channel.

Some technical information may be collected automatically through:

  • essential cookies;
  • website-session tools;
  • server logs;
  • security tools;
  • WooCommerce or WordPress functionality;
  • payment-processing integrations; and
  • embedded third-party content.

Brainy X may also receive limited personal information from service providers, such as payment confirmation from PayFast or delivery information generated by the website.

6. Why We Process Personal Information

Brainy X may process personal information for the following purposes:

  • to process and manage orders;
  • to confirm payment;
  • to send order confirmations, receipts and transactional emails;
  • to deliver purchased digital products;
  • to provide download links;
  • to identify and correct failed or incomplete deliveries;
  • to communicate with customers about their orders;
  • to respond to enquiries, complaints and support requests;
  • to investigate duplicate payments or incorrect charges;
  • to process refunds, credits or replacements where applicable;
  • to maintain purchase, accounting and customer-support records;
  • to prevent fraud, unauthorised access and misuse of the website;
  • to protect Brainy X content and intellectual property;
  • to maintain the security and proper operation of the website;
  • to diagnose technical problems;
  • to comply with tax, accounting, consumer-protection and other legal obligations;
  • to establish, exercise or defend legal rights; and
  • to improve website and customer-service operations.

Brainy X will not use personal information for a purpose that is incompatible with the purpose for which it was collected, unless the further use is permitted by law or the person concerned has given appropriate consent.

7. Grounds for Processing Personal Information

Brainy X processes personal information only where there is a lawful and reasonable basis for doing so.

Depending on the circumstances, personal information may be processed because:

  • it is necessary to complete or perform a transaction requested by the customer;
  • it is necessary to comply with a legal obligation;
  • the person concerned has consented to the processing;
  • it protects a legitimate interest of the person concerned;
  • it is necessary for the proper pursuit of Brainy X’s legitimate business interests; or
  • another lawful ground under POPIA applies.

8. Orders, WooCommerce and Transactional Emails

Brainy X may use WordPress, WooCommerce and related website tools to manage:

  • product information;
  • shopping-cart functionality;
  • checkout;
  • order records;
  • payment status;
  • transactional emails;
  • download links; and
  • customer-support information.

Information submitted during checkout is used to complete the transaction and deliver the purchased product.

Brainy X does not currently require customers to create an online learner account in order to purchase or access the downloadable summaries sold through the Brainy X website.

9. Payments

Payments are processed through PayFast or another payment provider identified during checkout.

The payment provider may collect and process the information required to:

  • authenticate the payer;
  • authorise the transaction;
  • prevent fraud;
  • complete the payment; and
  • comply with its own legal obligations.

Brainy X may receive limited payment-related information, including:

  • the payment status;
  • the amount paid;
  • the transaction date;
  • the transaction reference;
  • the payer or order identification information; and
  • information required to investigate a payment problem.

The payment provider’s handling of personal information is governed by its own privacy policy and terms.

10. Cookies and Essential Website Tools

The Brainy X website may use cookies and similar technologies that are necessary for the website to function properly.

These may be used for:

  • maintaining website sessions;
  • remembering shopping-cart contents;
  • processing checkout steps;
  • supporting payment processing;
  • delivering digital products;
  • protecting the website against fraud or misuse;
  • maintaining website security; and
  • remembering basic user selections.

Brainy X does not knowingly use Google Analytics or Meta Pixel at present.

This Privacy Policy will be updated if Brainy X introduces analytics, advertising pixels or similar non-essential tracking technologies.

You may adjust cookie settings through your browser. However, disabling essential cookies may prevent the shopping cart, checkout, payment or download functions from working correctly.

11. Embedded YouTube Content

The Brainy X website may contain embedded YouTube videos or links to the Brainy X YouTube channel.

When you view, play or interact with embedded YouTube content, YouTube or Google may collect information such as:

  • your IP address;
  • device and browser information;
  • cookie information;
  • video-viewing activity; and
  • other usage information.

This processing is controlled by the relevant third-party provider and is subject to that provider’s own privacy policy and terms.

Where reasonably possible, Brainy X may use privacy-enhanced embedding options to reduce unnecessary data collection.

12. Links to External Websites

The Brainy X website may contain links to external websites or services.

Brainy X is not responsible for the privacy practices, content, security or availability of external websites that it does not control.

Users should review the privacy policies of external websites before submitting personal information to them.

13. Sharing of Personal Information

Brainy X does not sell or rent personal information.

Personal information may be shared only where reasonably necessary with:

  • PayFast or another payment processor;
  • WordPress, WooCommerce and associated service providers;
  • website-hosting providers;
  • email and communication providers;
  • website developers and technical-support providers;
  • website-security and fraud-prevention providers;
  • accountants, auditors, insurers or professional advisers;
  • banks or payment institutions where required to investigate a transaction;
  • regulatory, government or law-enforcement authorities where required by law; and
  • another party where disclosure is necessary to establish, exercise or defend a legal right.

Service providers should receive only the personal information reasonably necessary to perform the service for which they were appointed.

14. Service Providers Acting on Our Behalf

Where another person or service provider processes personal information on behalf of Brainy X, Brainy X will take reasonable steps to use providers that can appropriately protect that information.

Service providers may be required to:

  • process personal information only for the agreed purpose;
  • keep the information confidential;
  • use reasonable security measures;
  • notify Brainy X of relevant security incidents; and
  • delete or return information when it is no longer required, where appropriate.

15. International Processing and Storage

Some website, hosting, email, payment or embedded-content providers may store or process information outside South Africa.

Where personal information is transferred to another country, Brainy X will take reasonably appropriate steps to ensure that the transfer and processing are permitted under applicable law and that suitable safeguards are in place.

These safeguards may include:

  • using a provider subject to appropriate data-protection laws;
  • contractual privacy and security obligations;
  • the person’s consent, where legally appropriate; or
  • another lawful basis for the transfer.

16. Information About Children

Brainy X provides educational products and free educational content that may be used by school learners.

However, purchases should be completed by a parent, guardian or another authorised adult.

Children should not:

  • place orders;
  • submit payment information;
  • send personal information to Brainy X; or
  • contact Brainy X with personal details

without the knowledge and involvement of a parent or guardian.

Where Brainy X becomes aware that personal information relating to a child has been collected unnecessarily or without appropriate authority, reasonable steps may be taken to delete, restrict or otherwise lawfully manage that information.

17. Direct Marketing

Brainy X may send communications that are necessary to complete or manage a customer’s order. These transactional communications may include:

  • order confirmations;
  • payment notifications;
  • download links;
  • delivery notices;
  • refund information;
  • product corrections; and
  • responses to support requests.

Transactional communications are not marketing messages.

Brainy X will send direct-marketing communications only where permitted by applicable law.

Where required, Brainy X will obtain consent before sending marketing communications. Every electronic marketing message will provide a reasonable way to opt out of future marketing.

Opting out of marketing will not prevent Brainy X from sending communications that are necessary to manage an existing order or respond to a request.

18. Security of Personal Information

Brainy X takes reasonable technical and organisational measures to protect personal information against:

  • loss;
  • damage;
  • unauthorised destruction;
  • unlawful access;
  • unauthorised disclosure;
  • misuse; and
  • alteration.

Reasonable safeguards may include:

  • password and access controls;
  • website-security measures;
  • software updates;
  • secure payment processing;
  • limited access to customer information;
  • backups where appropriate; and
  • the use of reputable service providers.

However, no website, email system, electronic transmission or storage system can be guaranteed to be completely secure.

19. Security Compromises

If Brainy X has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, Brainy X will investigate the incident and take reasonable steps to limit possible harm.

Where required by applicable law, Brainy X will notify the Information Regulator and affected persons as soon as reasonably possible, subject to any lawful instruction or delay.

20. Retention of Personal Information

Brainy X retains personal information only for as long as it is reasonably required for:

  • order fulfilment;
  • digital product delivery;
  • customer support;
  • refund and complaint management;
  • accounting and tax purposes;
  • fraud prevention;
  • record-keeping;
  • dispute resolution;
  • legal compliance; and
  • the establishment, exercise or defence of legal rights.

Different categories of information may be retained for different periods.

Where personal information is no longer required and there is no lawful reason to retain it, Brainy X will take reasonable steps to delete, destroy or de-identify it.

Backup copies may remain for a limited period until they are securely overwritten or deleted through normal system processes.

21. Accuracy of Personal Information

Brainy X takes reasonable steps to keep personal information accurate, complete and up to date where necessary for the purpose for which it is used.

Customers are responsible for supplying accurate information and informing Brainy X if important information relating to an order or support request changes.

22. Your Rights

Subject to applicable law, you may have the right to:

  • ask whether Brainy X holds personal information about you;
  • request access to your personal information;
  • request correction of inaccurate, incomplete or outdated information;
  • request deletion or destruction of information that Brainy X is no longer authorised to retain;
  • object to certain processing of your personal information;
  • withdraw consent where processing depends on consent;
  • request information about the identity of third parties who have had access to your information, where applicable;
  • opt out of direct marketing;
  • complain about the processing of your personal information; and
  • lodge a complaint with the Information Regulator.

These rights may be subject to lawful limitations. For example, Brainy X may need to retain certain order or transaction information to comply with accounting, tax or other legal obligations.

23. Privacy Requests

To make a privacy-related request, contact:

Email: sales@brainy-x.com
Telephone and WhatsApp: +27 69 412 0742

Please provide enough information for Brainy X to identify the relevant records and understand the request.

Brainy X may request reasonable proof of identity before providing access to, correcting or deleting personal information. This is done to prevent personal information from being disclosed or changed without authorisation.

Brainy X will respond within a reasonable period and in accordance with applicable law.

24. Complaints to the Information Regulator

If you believe that your personal information has been processed in a manner that does not comply with POPIA, you may contact or lodge a complaint with the Information Regulator of South Africa.

Information Regulator South Africa
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
Telephone: 010 023 5200
Toll-free number: 0800 017 160
Physical address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, South Africa

25. Changes to This Privacy Policy

Brainy X may update this Privacy Policy where necessary because of changes to:

  • the website;
  • products or services;
  • payment or delivery systems;
  • cookies or tracking technologies;
  • service providers;
  • business operations; or
  • applicable legal requirements.

The latest version published on the Brainy X website will apply.

The date at the top of this Privacy Policy indicates when it was last updated.

26. Contact Details

For privacy-related questions, requests or complaints, contact:

Brainy X
Yvette Conradie, a sole proprietor trading as Brainy X
Email: sales@brainy-x.com
Telephone and WhatsApp: +27 69 412 0742
Physical address: 15 Reinette Street, The Reeds, Centurion, 0158, South Africa