Aha

Privacy Policy

Effective Date: May 2026 Β· Compliant with POPIA, CPA & ECTA

AHA Student Home is committed to protecting your privacy. Please read this policy carefully to understand how we handle your personal information.

1. Introduction

AHA Student Home ("we", "us", "our") is committed to protecting your privacy and ensuring compliance with the Protection of Personal Information Act (POPIA), Consumer Protection Act (CPA), and Electronic Communications and Transactions Act (ECTA). This Privacy Policy explains how we collect, use, store, and protect your personal information.

2. Scope

This policy applies to all users of the AHA platform, including students, landlords, and visitors accessing our website or mobile application.

3. Personal Information We Collect

We collect personal data including but not limited to: full names and identity numbers, contact details (email, phone number), student information (university, student number), login credentials and account data, property listing details, communication records and messaging history, payment and subscription information, and usage data and device information.

4. Legal Basis for Processing

We process personal information based on: consent freely given by the data subject, contractual necessity to provide our services, legal obligations imposed by applicable South African law, and legitimate interests of the business where these do not override your rights.

5. Purpose of Processing

We use your personal information to: provide and improve our accommodation listing and marketplace services, verify landlord accreditation and NSFAS eligibility, facilitate communication between students and landlords, send service-related notifications and reminders, comply with legal and regulatory obligations, and conduct analytics to enhance platform safety and performance.

6. Data Sharing

We do not sell your personal data to third parties. Information may be shared with: service providers who assist in operating our platform (under strict confidentiality agreements), authorised partners such as accreditation bodies, and government authorities or regulators where required by law.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include encryption, access controls, and regular security assessments.

8. Your Rights Under POPIA

As a data subject you have the right to: access your personal information held by us, request correction of inaccurate data, request deletion of your data where legally permissible, object to or restrict processing in certain circumstances, and lodge a complaint with the Information Regulator of South Africa.

9. Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Once no longer needed, data is securely deleted or anonymised.

10. Contact Us

For any privacy-related queries, requests, or complaints, please contact our Information Officer at: varsityhub@outlook.com