Coco Campus
A brand of Coco Corporate (Pty) Ltd
Registration number 2021/875932/07
The Business Exchange, Floor 1, Waterway House South, 3 Dock Road, Victoria and Alfred Waterfront, Cape Town, Western Cape, 8002, South Africa
Last updated: 17 August 2026
Coco Campus is the learning arm of Coco Corporate. Where education meets elevation, and learning becomes legacy. When you learn with us, you trust us with information about yourself, your work and your progress. We take that seriously.
This policy explains what personal information we collect, why we collect it, what we do with it, and the rights you have. It applies to this website, to our courses and programmes, and to anyone who visits Coco Campus, creates an account, enrols in a programme, joins our community or subscribes to our mailing list.
We process personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA) in South Africa. Where we handle information belonging to people in the United Kingdom or the European Economic Area, we also apply the UK GDPR and EU GDPR.
Coco Campus is a trading brand of Coco Corporate (Pty) Ltd. Coco Campus is not a separate legal entity. Coco Corporate (Pty) Ltd is the responsible party under POPIA and the data controller under the GDPR.
Our Information Officer is Celine Stark, registered with the Information Regulator of South Africa. For anything relating to Coco Campus, she can be contacted at hello@cococampus.com or at the address above.
When you visit this website. Your IP address, browser and device type, the pages you view, how you arrived, and how long you stay. This is collected through cookies and similar technologies. See section 6
When you create an account. Your name, email address, and the password you set, which is stored in encrypted form and is never visible to us. You may also choose to add a profile photo, a biography, your job title, your location or your social profiles.
When you enrol in a course or programme. Which programmes you have enrolled in, when you enrolled, and the terms on which you have access.
When you learn. Your progress through course material, which lessons and units you have completed, how far through a video you watched, your answers to quizzes and assessments, your scores, any assignments or files you submit, notes you take, and any certificate issued to you.
When you take part in the community. Anything you post, comment, upload or share in community spaces, along with your profile information. Please treat community areas as public to other members.
When you buy something from us. Your billing name and address, the transaction amount and date, what you purchased, and the outcome of the payment. Card details are entered directly with our payment provider and are processed by them. We do not see, receive or store your full card number.
When you subscribe to our mailing list. Your name and email address, and whether you open or click our emails.
When you contact us. Your name, email address and whatever you choose to tell us in your message.
To give you access to what you have enrolled in. We cannot deliver a course without an account, a record of enrolment and a record of progress. This is necessary to perform our contract with you.
To track your learning and issue certificates. Assessment results and completion records exist so that you can see your progress and so that any certificate we issue is accurate and defensible. This is necessary to perform our contract with you.
To take payment and keep proper records. Necessary to perform our contract with you, and to meet our legal, tax and accounting obligations.
To run the community. Where community features form part of a programme, this is necessary to perform our contract with you. Where you join a community voluntarily, we rely on your consent.
To send you marketing. We rely on your consent, or on the limited grounds POPIA allows for existing customers. You can withdraw consent at any time. See section 11.
To improve our courses and understand how the site is used. We look at aggregate progress and drop-off data to see where a programme is working and where it is not. We rely on our legitimate interests in improving what we teach, balanced against your privacy.
To keep the platform secure and prevent misuse. Including detecting shared accounts and unauthorised distribution of course material. We rely on our legitimate interests.
To meet our legal, tax and accounting obligations. Necessary for compliance with the law.
We do not sell your personal information, and we do not share it for anyone else's marketing.
We share it with service providers who help us run Coco Campus, and only to the extent they need it:
- LearnWorlds (CY) Ltd, our learning platform provider, which hosts this site, your account and your course records. LearnWorlds acts as our processor under a data processing agreement and hosts data within the European Economic Area on Google Cloud infrastructure in Ireland. Its own sub-processors include Cloudflare, MongoDB, Mailgun and Zoom.
-
Our payment provider, which processes card payments and holds the card details we never see.
-
Our email and mailing list provider, which delivers our newsletters and tracks opens and clicks.
-
Our analytics providers, described in section 6.
-
Our professional advisers, such as accountants and lawyers, where they need it to advise us.
We may also disclose information where the law requires it, or where it is necessary to establish, exercise or defend a legal claim.
Where a programme is delivered together with a named partner or guest facilitator, we will tell you before you enrol.
Some cookies are strictly necessary. They keep you logged in, remember your place in a course, and keep the site secure. Without them, the platform does not work, so these are always active.
Others are optional, and we use them to understand how Coco Campus is used:
Google Analytics. Property G-4R08LSN6S7. Tells us how many people visit, which pages and courses they look at, and how they found us. Google may process this outside South Africa.
Metricool. Sits alongside our social media reporting and tells us which channels bring people to Coco Campus, so we can see which content actually leads somewhere.
We do not currently run advertising pixels on Coco Campus. If that changes, this policy will be updated before any such tag goes live.
You can control optional cookies through our consent banner, and you can change your choice at any time. You can also set your browser to refuse cookies, though parts of the platform will not work properly if you block the strictly necessary ones.
Some of our providers are based outside South Africa. LearnWorlds is based in Cyprus and hosts data in Ireland. Our analytics and email providers may process information in the European Union, the United Kingdom or the United States.
Where information leaves South Africa, we rely on section 72 of POPIA. We only use providers who are bound by agreements requiring a level of protection substantially similar to POPIA, or who operate in a country with comparable data protection law.
Learner accounts and course records: for as long as your account is active, and for 5 years after your last enrolment ends, so that we can verify completion and reissue certificates if asked.
Certificates and assessment results: 5 years from issue, for the same reason.
Payment and transaction records: 5 years, as required by South African tax law.
Community posts: until you delete them or close your account, after which we may retain them in anonymised form so that conversation threads still make sense.
Enquiries that do not lead anywhere: 24 months.
Mailing list: until you unsubscribe, plus a suppression record so that we do not email you again by mistake.
Website analytics: in line with our analytics providers' standard retention settings.
We may keep information for longer where the law requires it, or where it is needed for a legal claim.
Access to learner records is limited to the people at Coco Corporate who need it to deliver your programme. Our platform provider holds recognised security certifications and encrypts data in transit and at rest. Payment card details never reach our systems. Accounts are password-protected, and passwords are stored in hashed form.
No system is perfectly secure. If a breach occurs that creates a risk to you, we will notify you and the Information Regulator as POPIA requires.
You have the right to:
-
ask what personal information we hold about you and be given a copy
-
ask us to correct anything that is wrong or incomplete
-
ask us to delete information we no longer have grounds to keep
-
object to processing we carry out on the basis of legitimate interests
-
withdraw consent at any time, where we relied on consent
-
ask us to restrict how we use your information while a query is resolved
-
ask for your information in a portable format
-
complain to the Information Regulator
Most of your account and profile information can be corrected by you directly in your account settings. For anything else, email hello@cococampus.com. We will respond within a reasonable period and in any event within the time POPIA allows. There is no charge for this.
We will only send you marketing where you have agreed to receive it, or where POPIA permits us to contact an existing customer about similar offerings.
Every marketing email carries an unsubscribe link, and unsubscribing takes effect immediately.
Withdrawing marketing consent does not affect emails we need to send you about a course you are enrolled in, such as access details or timetable changes.
Coco Campus is designed for working professionals and is not intended for children. We do not knowingly create accounts for anyone under 18.
Under POPIA, personal information about a child may only be processed with the consent of a competent person. If you are under 18 and wish to enrol, a parent or guardian must do so on your behalf and must contact us at hello@cococampus.com first. If we learn that we hold information about a child without that consent, we will delete it.
If you are unhappy with how we have handled your information, please tell us first at hello@cococampus.com so that we have the chance to put it right.
You also have the right to complain directly to:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
complaints.IR@justice.gov.za
If you are in the United Kingdom or the European Economic Area, you may also complain to your local supervisory authority.
We may update this policy as our programmes, providers or the law change. The date at the top shows when it was last updated. Where a change materially affects how we use your information, we will tell you directly rather than relying on you to notice.
For anything relating to this policy, your information or your rights:
Coco Campus
A brand of Coco Corporate (Pty) Ltd hello@cococampus.com The Business Exchange, Floor 1, Waterway House South, 3 Dock Road, Victoria and Alfred Waterfront, Cape Town, Western Cape, 8002, South Africa
For matters relating to Coco Corporate's agency services rather than Coco Campus, please use hello@cococorporate.com.
