Data Protection Overview
We are deeply committed to protecting the privacy of our students, parents, and educators. This plain-English guide summarises how Beardparlor (Pty) Ltd (operating as ExamBuddy) aligns with the Botswana Data Protection Act (BDPA), 2024.
Children's Privacy (Under 16)
In full compliance with Section 29 of the BDPA, all student accounts for individuals aged 16 or younger must be provisioned and authorised by a parent, legal guardian, or an authorised educational entity. We do not knowingly accept direct registrations from minors.
Institutional Security
We employ enterprise-grade security protocols, including database-level encryption and strict access controls. Whether acting as a Data Processor for schools or a Data Controller for parents, we uphold the BDPA's Integrity and Confidentiality principles.
Local Data Storage
Our platform uses secure database infrastructure located in Botswana. We are committed to hosting and processing your personal data locally within Botswana's jurisdiction to ensure compliance with the BDPA.
Data Portability & Erasure
Under the BDPA, you have the right to receive your personal data in a structured, commonly used format. You may also request complete deletion of your account and associated data at any time. Contact us at privacy@exambuddy.site.
Our 5 Privacy Promises
- 1
Data Minimisation
We only collect the absolute minimum personal data necessary to provide personalised academic testing and feedback. We never ask for irrelevant demographic information.
- 2
Purpose Limitation
Your data is strictly used for educational progression. We do not sell, rent, or lease student profiles or analytics to any third-party marketing agencies.
- 3
Transparency & Control
Parents and educators have full visibility into what data is collected. You can request data exportation, rectification, or account deletion at any time via your dashboard or by emailing us.
- 4
72-Hour Breach Reporting
In the unlikely event of a security incident posing a risk to personal freedoms, we adhere to the strict 72-hour regulatory notification timeline mandated by the Act.
- 5
AI Impact Assessment
Given that our platform processes children's educational data using AI, we conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities involving automated decision-making and profiling, as recommended by the BDPA.
Data Protection Contact
For any questions, concerns, or requests related to your personal data and privacy rights, you may contact our designated Data Protection Contact:
Email: privacy@exambuddy.site
Organisation: Beardparlor (Pty) Ltd
Location: Gaborone, Botswana
We aim to respond to all data protection inquiries within 30 days.
Read the Full Documents
This page is a simplified summary. For complete legal definitions, please review our official policies.