Privacy notice
How the Able Exams store handles your personal information. Last updated: 17 October 2026.
1. Who is responsible
Able Directory (Pty) Ltd (Registration No. 2017/325344/07), owner Stefan Potgieter, is the responsible party under the Protection of Personal Information Act (POPIA). Stefan Potgieter is the Information Officer. Contact: [enable JavaScript to see our email address].
2. What we store in our database
Every order is saved in a database that belongs to the Able Exams store only. It is separate from the Able Rugby app, is protected by its own password and is kept on our hosting provider's database server.
For each order we store: your name and email address, your order number, what you bought and the price, the payment status and PayFast's reference, the time you accepted the terms and the disclaimer together with the internet (IP) address and browser details your request came from, the times your files were emailed or downloaded, and a log of the emails we sent you. We also keep a log of the notifications PayFast sends us about payments. If you claim the pass refund, we also receive the NSC certificate or Statement of Results you send us (it shows the learner's name and final CAT mark). The download links we email you are stored only as a scrambled (hashed) code, so the stored copy cannot be used to download anything.
When you start a purchase, we create your order straight away with the status "pending". If you do not pay, we delete it after 30 days. If you pay, it stays as your order.
We do not see or store your card details: payment is handled by PayFast. We do not keep a copy of your stamped PDF: it is made again each time it is sent.
Separately from orders, we count visits to our pages in daily totals (for example how many people opened the buy page that day, and which link they came from). We do not store IP addresses or use cookies for this, and the totals cannot be traced to a person.
3. Why we use it
To carry out your purchase, send you the file, print your name on your copy, and help you if something goes wrong. To keep the sales and accounting records the law requires. And, because it is in our legitimate interest, to prove that you accepted the terms, prevent fraud and protect the guides from being shared.
Your name, email address and order number are placed inside the PDF you buy, as described in the terms.
We use your email address only for your order. We will not send you marketing without asking you first.
4. Who sees it
PayFast, to process the payment, and our hosting provider and email system, to run the store. Our hosting provider also keeps standard server logs, which include internet addresses, and visit statistics that use no cookies. We do not sell your information and we do not use it for advertising.
Where one of these providers stores or processes information outside South Africa, we rely on it to protect that information to a standard comparable to POPIA.
5. Children
The guides are written for Grade 12 learners, many of whom are under 18. A purchase must be made by someone 18 or older, or by a parent or guardian. If you enter a learner's name to be printed on a copy, you confirm that the learner is 18 or older or that you are their parent or guardian and agree to us using that name for this purpose. In the same way, if you send us a learner's results to claim the pass refund, you confirm that you are the learner (18 or older) or the learner's parent or guardian, and you agree that we may use the results to check your claim.
6. Keeping it safe
The database is password protected and its login is kept outside the public part of the website. The website uses an encrypted (HTTPS) connection. If a security breach affects your information, we will tell you and the Information Regulator as the law requires.
7. How long we keep it
Paid orders: seven years, because a company must keep its accounting records for that long.
Attempts that were never paid for (a name and email address typed in, then abandoned): deleted after 30 days.
An NSC certificate or Statement of Results sent with a pass refund claim: our copy is deleted once the claim is settled. The record of the refund is kept with the order.
Download links: deleted a day after they expire (so within 8 days).
Counters that limit repeated requests from one internet address: deleted within a day.
9. Your rights
You can ask what we hold about you, ask us to correct it, ask us to delete it where the law allows, or object to how we use it. Email [enable JavaScript to see our email address]. If you are not happy with how we handle your information, you may complain to the Information Regulator of South Africa.