Privacy Policy

1. Information We Collect

When you use My Teachers Box, we may collect the following personal information:

• Full name and email address (provided at registration)
• School or employer name (provided at registration)
• IP address and browser/device information (collected automatically when you visit)
• Payment transaction records (processed and held by Paystack — we do not store your card details)

2. Why We Collect It (Legal Basis)

We collect personal information for the following purposes:

• To create and manage your account (contractual necessity)
• To verify your subscription status and grant the correct access level (contractual necessity)
• To process subscription payments via Paystack (contractual necessity)
• To provide technical support (legitimate interest)
• To send service-related communications such as password resets and billing reminders (contractual necessity)

We do not use your information for marketing without your explicit consent. For users in the EU and UK, our legal basis for processing is either contractual necessity or legitimate interests as described above.

3. How We Store & Protect It

• Your data is stored on secure servers.
• Passwords are stored in encrypted (hashed) form — we never see your plain-text password.
• We do not sell, rent, or trade your personal information to third parties.
• We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

4. International Data Transfers

My Teachers Box is operated from South Africa and your data may be stored or processed on servers located outside your country of residence. Where personal data is transferred internationally (for example, via Paystack’s infrastructure), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) for EU/UK data transfers, or equivalent protections required by applicable law.

5. Who We Share It With

• Paystack — for secure payment processing. Their own Privacy Policy governs how they handle your data.

We do not share your personal information with any other third parties without your explicit consent, except where required by applicable law or a valid court or regulatory order in any jurisdiction.

6. Your Privacy Rights

Regardless of where you are located, you have the following rights regarding your personal data:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your account and associated personal data (“right to be forgotten”).
• Portability — request your data in a commonly used, machine-readable format (EU/UK GDPR users).
• Objection / Restriction — object to or request restriction of certain processing of your data.
• Opt-out of sale — we do not sell personal data; this right is included for completeness for California (CCPA) users.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at legal@myteachersbox.com. We will respond within 30 days (or within any shorter period required by your local law).

7. Cookies

We use cookies strictly to maintain your login session. We do not currently use third-party advertising or analytics cookies. If this changes, we will update this policy and, where required by law, request your consent before setting non-essential cookies.

8. Data Retention

We retain your personal information for as long as your account is active, or as long as needed to provide you with our service and comply with our legal obligations. If you request deletion of your account, we will remove your personal information within 30 days, unless we are required by law to retain certain records for a longer period.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a prominent notice on the site. Continued use of My Teachers Box after changes constitutes acceptance of the updated policy.

10. Contact & Regulatory Complaints

For privacy-related queries or to exercise your rights, contact us at: legal@myteachersbox.com

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:

• South Africa: Information Regulator — inforegulator.org.za
• EU: Your national Data Protection Authority (DPA) — Find your EU DPA
• United Kingdom: Information Commissioner’s Office (ICO) — ico.org.uk
• Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
• Other countries: Please contact your relevant national data protection or privacy authority.