Privacy Policy

Last updated 20 October 2026

What we collect when you pay

• The school, the item bought, the amount and currency, the payment method, the status and the dates.
• The contact name and email you enter, so we can send the receipt and licence or token confirmation.

What we do not collect

We never see or store your card number. Card payments are entered on PayFast's secure page and Alipay payments on Alipay's page; we only receive a "paid" or "not paid" result and a reference.

Who we share it with

• PayFast and Alipay, to process the payment you choose.
• The NovaEd school platform, so your purchase can be switched on for the right school.

We do not sell payment or contact information.

Where it is kept and for how long

Order records are kept on NovaEd servers in Hong Kong. Payments by schools outside China are also processed by CU3ED Design Agency (Pty) Ltd in South Africa. We keep financial records for as long as the law requires.

The laws we follow

• China: the Personal Information Protection Law (PIPL), the Data Security Law and the Cybersecurity Law. We collect only what a payment needs, tell you why, and obtain your consent where the law requires it. Transfer of information outside mainland China (to Hong Kong and South Africa) is done only as needed to process and record your payment.
• South Africa: the Protection of Personal Information Act (POPIA).
• Europe and elsewhere: where a school or contact is in a country with its own privacy law, we honour the rights that law gives them.

Your rights

You can ask to see, copy, correct or delete the contact details connected to a payment, or withdraw consent, by writing to support. Financial records we must keep by law cannot be deleted before that period ends. We reply within 24 hours on working days and complete requests within the time the applicable law allows.

Privacy requests go to the support address on the Support page.