Privacy notice

This notice explains what personal information we collect, why we collect it, who helps us process it, and your rights under the Protection of Personal Information Act (POPIA).

Who is responsible for your information

MAZE Education (Pty) Ltd (registration number 2020/098044/07), 45 Buffalo Thorn Road, Fourways, Johannesburg, 2055, is responsible for the personal information described here. POPIA calls this the responsible party.

Our Information Officer is Tim Holliday. For anything about your personal information, email hello@maze.education or call 084 502 4777.

What we collect

• When you fill in a form (contact, quote, booking, purchase order, support or newsletter): your name, email address, phone number, school, role and province, what you write in your message, and details of what you need, such as dates, quantities or the number of learners at your school.
• When you order: what you ordered, whether you collect or want delivery, your delivery address and school VAT number if you give them, and the payment status and reference from Paystack. You enter your card number in Paystack's secure payment window, so we never see or store it.
• When you email, call or WhatsApp us: your contact details and what you tell us.
• If you arrive through a link with campaign tags, for example from one of our emails: the name of the campaign, sent with your enquiry, so we know which messages are useful.
• Ask Maze, if it is switched on: your email address to sign in, the name, school and role you give us, your questions and the answers, and any estimates you ask for.
• The clap test uses your device's microphone only after your browser asks you and you allow it. The sound is measured on your device. Nothing is sent to us unless you choose, at the end, to send your claps: then we receive only the claps and their echoes (about 9 seconds of sound), a line about your microphone's settings and the details you give, and we keep the recording with your enquiry so our acoustics team can listen to the room.

What we never collect: learners' information

We work with adults: teachers, school staff, parents and suppliers. We don't collect personal information about learners. Please don't send us learners' names, photos or other details in a form, an email or Ask Maze. If we receive them by mistake, we delete them.

Software we supply, such as Purple Mash, can hold learner information. Your school and the software owner manage that information under the software's own terms and privacy notice. It does not pass through this website.

Why we use it

• To reply to you, prepare quotes, confirm bookings, deliver orders, invoice you and give support. We need your information to do what you ask us to.
• To keep the records the law requires, such as tax invoices.
• To send you news and teacher resources, but only if you ticked the box to agree. Every email has an unsubscribe link.

We don't sell your information, and we don't share it with anyone for their own marketing.

Who helps us process it

We use a small number of service providers (POPIA calls them operators). They process your information only for us, under written terms that require them to keep it secure and confidential.

• Zoho: our customer records (CRM), invoicing (Zoho Books) and email newsletters (Zoho Campaigns). Our Zoho account is held in Zoho's data centres outside South Africa, in the United States.
• Zoho Bookings: when you pick a time in one of our booking calendars, Zoho Bookings takes the booking and the details you enter. The calendar only loads when you press the button to open it, and it may then set its own cookies.
• Paystack: card payments.
• Lovable: our website host, which runs this site and, if Ask Maze is switched on, its sign-in.
• Google Fonts: this site loads its fonts from Google, so your browser connects to Google's servers, which can see your IP address. We don't send Google anything else.
• Anthropic: if Ask Maze is switched on, Anthropic's Claude processes your questions to write the answers.

People who help us deliver what you ordered, such as a courier or our installation partner, get only what they need for that job, like a name, phone number and address. We also share information when the law requires it, for example with SARS.

Sending information outside South Africa

Some of these providers store or process information outside South Africa, including in the United States. Under section 72 of POPIA, we only send personal information across the border when the recipient is bound by a law, binding corporate rules or an agreement that protects it to a standard similar to POPIA, or when the transfer is needed to do what you asked us to do.

How long we keep it

• Enquiries and quotes: while we are in touch, and for two years after our last contact, unless you become a customer.
• Orders, invoices and payment records: at least five years, because tax law requires it.
• Newsletter: until you unsubscribe. After that we keep only your email address, marked as unsubscribed, so that we don't email you again.
• Ask Maze conversations saved to your record: as for enquiries.

When we no longer need information, we delete it or make sure it can no longer identify you.

Your rights

Under POPIA you can:

• ask whether we hold information about you, and ask for a copy of it
• ask us to correct or delete information that is wrong, out of date or no longer needed
• object to us using your information, including for direct marketing
• withdraw your consent to our newsletter at any time, using the unsubscribe link in every email
• complain to the Information Regulator

To use these rights, contact us using the details below. We may ask you to prove who you are first, and we reply within 30 days. Confirming whether we hold your information is free, and we tell you before any prescribed fee applies to copies. Our PAIA manual explains how to ask for other records.

How we keep it safe

We take reasonable steps to protect your information, as POPIA requires. Only the people at Maze who need it can see it, card details never reach our systems, and this website sends everything over an encrypted connection. If a security breach affects your information, we tell you and the Information Regulator, as the law requires.

Cookies and your browser's storage

• This site does not use advertising cookies.
• Visitor analytics only with your OK: if you say yes when the site asks, Google Analytics (run by Google) sets its own cookies to show us which pages people visit and how they found the site. We have switched off Google Signals and ad personalisation, and it does not record what you type into forms. Google may process this information outside South Africa under its own data processing terms. If you say no, or do not answer, it is not loaded at all. Your choice is kept in your browser's local storage, and you can change it any time with "Cookie choices" at the bottom of every page.
• Your cart is kept in your browser's local storage, on your own device, so it is still there when you come back. We only receive it when you check out or send a purchase order.
• Campaign tags from the link you arrived on are kept in your browser for that visit only.
• If you sign in to Ask Maze, your sign-in is kept in your browser's local storage until you sign out.
• The AI policy wizard keeps your answers in your browser's local storage, on your own device, while you work. When you fill in the short form for your downloads, we receive your name, school, role and email and the choices you made (never the policy text, and nothing about learners), keep them in our CRM and email you a copy of your policy. Your browser also remembers that you filled in the form, so the downloads stay open next time.
• The classroom acoustics checklist keeps your ticks in your browser's local storage, on your own device.
• Paystack's payment window may use its own cookies to keep payments secure.

You can clear all of this at any time in your browser's settings.

Complaints

If you're unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Regulator at inforegulator.org.za.

Contact us about privacy

Email hello@maze.education or call 084 502 4777. If you would rather write to us by post, email us and we will send you our postal address.

Changes to this notice

We update this notice when the way we handle information changes. The date below shows the latest version.

Last updated: 23 October 2026