Attuned2UBack to home
Privacy

Privacy policy

Last updated 3 September 2026. This policy explains what personal information Attuned2U collects, why, where it is processed, and the choices and rights you have under South Africa's Protection of Personal Information Act (POPIA).

1. Who we are

Attuned2U Professional Development ("Attuned2U", "we", "us") provides CPD-accredited training in the Community Resiliency Model™ and Trauma Resiliency Model™ for practitioners. The training is presented by Dr Barbara Wade, a clinical social worker registered with the SACSSP (PR no. 089 000 0253642), based in Benoni North, Gauteng, South Africa.

Attuned2U is the responsible party for the personal information described in this policy. Our Information Officer is Dr Barbara Wade. You can reach us at drwade@olivebranch.co.za or on 072 122 4766.

2. What this policy covers

This policy applies to:

  • this website, attuned2u.co.za, including the contact form;
  • our online learning platform at app.attuned2u.co.za, where course videos, materials, quizzes, evaluations and certificates are delivered;
  • live practice sessions held on Zoom;
  • registration, payment and certification for our courses.

3. What we collect

When you contact us

The contact form asks for your name, email address, profession and professional registration number (optional), which module you are interested in, and your message. This is sent to us by email so we can reply.

When you register for a course

The course registration form collects your full name, contact details, profession, professional body and registration number (for example SACSSP or HPCSA), and the details we need to issue a CPD certificate in your name. We also record that you have signed the Attuned2U confidentiality agreement.

When you pay

Deposits and course fees are paid by electronic funds transfer or through Paystack, our card-payment provider. We receive confirmation of payment, the amount, and the payer's name and email. We never see or store your full card number.

When you use the learning platform

Your platform account holds your name, email address and password (stored only as a secure hash), or, if you choose to sign in with Google, the name and email Google shares with us. As you work through a course we record your enrolments, lesson progress, quiz and evaluation answers and scores, private notes you save, and the certificates issued to you. We also keep basic technical logs (IP address, browser type, pages requested, timestamps) to keep the platform secure and working.

When you join live sessions

Live practice sessions run on Zoom. Zoom processes your display name, email, audio, video and chat for the duration of the session. We do not routinely record practice sessions; if a session is to be recorded you will be told beforehand.

What we do not collect

We do not use advertising trackers, and this website sets no cookies of its own. We do not knowingly collect information from anyone under 18; our training is for qualified practitioners.

4. Why we use it

  • To run the training — enrol you, give you access to materials, track your progress and mark evaluations.
  • To certify you — issue a CPD certificate bearing your name, registration number, training dates, accreditation number and points awarded, and to confirm that certificate to a professional body if you ask us to.
  • To communicate — reply to enquiries, send registration, payment, course and session details, and important notices about your training.
  • To take payment and keep the records South African tax law requires.
  • To protect the training — the course includes recorded client sessions, so we keep a record of who has signed the confidentiality agreement and who has accessed that material.
  • To keep our systems secure and fix faults.

We process your information because it is necessary to deliver the course you have asked for, because we have a legal obligation (tax and CPD accreditation records), or because we have a legitimate interest in running a safe and confidential training programme. We will ask for your consent before using your information for anything else, such as a newsletter.

5. The services we rely on

We use a small number of carefully chosen providers to run Attuned2U. Each acts as an operator on our instructions and may only use your information to provide its service to us.

ServiceWhat it does for usWhat it handles
CloudflareHosts and serves this website, provides security and protects it against attacks.Your IP address, browser details and the pages you request, held briefly in security and access logs.
ResendDelivers email from our website and platform: contact-form enquiries, sign-in and password emails, course notices.Your name, email address and the content of those messages.
ClassroomIO (self-hosted)The open-source learning platform our courses run on. We host our own copy on our own server at app.attuned2u.co.za, so your course data stays under our control rather than with a third-party platform provider.Your account, enrolments, progress, quiz and evaluation answers, notes and certificates, stored in our database and file storage.
PaystackProcesses card payments for course fees in South African rand.Payment details and confirmation. Card data is handled by Paystack under its own PCI-compliant systems.
GoogleOptional sign-in to the platform, and Google Forms for some course evaluations and skills assessments.With Google sign-in: your name and email. With Google Forms: the answers you submit.
ZoomLive practice sessions.Display name, email, audio, video and chat during a session.
SentryTells us when something breaks on the learning platform so we can fix it.Technical error reports, which may include your account identifier and the page you were on.

Some of these providers operate outside South Africa, including in the European Union and the United States. Where information leaves the country we rely on the provider's contractual commitments to protect it to a standard at least equivalent to POPIA, as section 72 of the Act requires.

6. Who else sees your information

We do not sell or rent personal information. Beyond the providers above, we share it only:

  • with the SACSSP or another professional body when we register CPD points or confirm a certificate, using the details needed for that purpose;
  • with our accountant for tax and bookkeeping;
  • where the law requires it, or to protect someone's safety.

7. Confidentiality of training material

Our courses include recorded sessions of real clients reprocessing traumatic events, shared with those clients' informed consent for the sole purpose of training practitioners. Every participant signs the Attuned2U confidentiality agreement before receiving access. Downloading, sharing or discussing that material outside the course is a breach of the agreement and may be reported to your professional body. This protects the clients who have generously allowed their sessions to be used, and it is the reason we keep a record of who has accessed the material.

8. How we protect it

All connections to our website and platform are encrypted (HTTPS). Passwords are stored only as salted hashes. Access to the platform's database and file storage is limited to the people who run Attuned2U and is protected by strong credentials. Payment card details never reach our systems. We review who has access to what, and we will tell you and the Information Regulator without undue delay if a breach affects your information.

9. How long we keep it

  • Enquiries — until we have answered and the conversation is closed, then no longer than 12 months.
  • Course and certificate records — for as long as we need to be able to re-issue or verify your certificate, which for CPD purposes is at least five years after the course.
  • Payment and tax records — five years, as required by South African tax law.
  • Platform account — until you ask us to delete it, or after a long period of inactivity following notice to you.
  • Technical logs — a short rolling period, typically no more than 30 days.

10. Your rights

Under POPIA you may ask us, free of charge, to:

  • confirm whether we hold personal information about you, and give you a copy of it;
  • correct or update information that is wrong or incomplete;
  • delete information we no longer need, or that we have no lawful basis to keep;
  • object to processing based on our legitimate interests;
  • withdraw consent where processing relies on it.

Email drwade@olivebranch.co.za and we will respond within a reasonable time, normally 30 days. We may need to verify your identity first. Some records, such as the certificate register and tax records, must be kept for the periods above even if you ask for deletion; we will explain this if it applies.

If you are not satisfied with how we handle your information, you can complain to the Information Regulator of South Africa at inforegulator.org.za or complaints.IR@justice.gov.za.

11. Cookies

This website sets no cookies of its own. Cloudflare may set a short-lived security cookie to distinguish real visitors from automated traffic. The learning platform sets the cookies needed to keep you signed in, recognise your device for up to 90 days, and remember your preferences; these are essential to the service and are not used for advertising.

12. Changes to this policy

We will update this page when our practices or providers change, and update the date at the top. Material changes that affect enrolled learners will also be announced on the platform or by email.

Back to the home pageAsk us a question
Attuned2U© 2026 Attuned2U Professional DevelopmentCRM™ and TRM™ are trademarks of the Trauma Resource InstitutePrivacy