Privacy Policy
Nirvana Aero Academy — PPG Training Portal. Last reviewed September 2026.
Who we are
Nirvana Aero Academy is a CAA-approved Declared Training Organisation, operating under South African Civil Aviation Regulations Part 141. For the purposes of the Protection of Personal Information Act 2013 (POPIA), the Academy is the responsible party for the personal information described in this policy, and Jean-Pierre Seger, the Academy's Accountable Manager, acts as Information Officer.
What we collect
When you register as a student, we collect your full name, phone number, ID or passport number, medical aid details, emergency contact details, and a medical declaration, along with your training progress, quiz results, and instructor sign-offs as you work through the syllabus.
Why we collect it, and on what legal basis
South African Civil Aviation Regulations require Declared Training Organisations to verify student identity and fitness to fly, maintain emergency contact information, and keep auditable training and proficiency records for every student. We ask for your medical aid details so we can act quickly on your behalf in a medical emergency; this is optional and you can register without providing it. We collect only what these purposes need, and we don't use it for anything else without asking you first. Processing is carried out under your consent, given at registration, and to the extent necessary to comply with our regulatory obligations as a Declared Training Organisation.
Who can see it, and how it's protected
Your profile and training records are visible to you and to the Academy's instructors and administrators, for the purpose of training oversight and licence sign-off. Your ID number, medical aid number, and medical declaration are encrypted in storage and masked by default on your profile page — instructors do not see them unless you choose to reveal them or a specific licensing requirement makes it necessary. Access by an instructor or administrator to your sensitive fields is logged. We keep reasonable technical and organisational security safeguards in place to protect your information against loss, unauthorised access, and misuse.
Where it's stored
The portal's database and hosting infrastructure are provided by third-party cloud service providers, which may process or store data outside South Africa as part of delivering that infrastructure. Where that happens, we rely on those providers' contractual and security commitments to keep your information protected to a standard consistent with POPIA, regardless of where it is processed.
How long we keep it
We retain your training records for as long as you are an active student, and for 5 years after your last activity with the Academy, to support your licence and any related regulatory enquiry, dispute, or audit. Records subject to an active regulatory matter are kept until that matter is resolved, even if that extends beyond 5 years.
Your rights
Under POPIA, you have the right to: ask us what personal information we hold about you and to access it; ask us to correct or update it if it's inaccurate or out of date; object to our processing of it, or ask us to delete it, subject to the regulatory retention needs described above; and withdraw your consent at any time (which may limit your ability to continue training with us while the relevant records are outstanding). If you believe we've mishandled your personal information, you can raise it with us directly using the contact details below, or lodge a complaint with the Information Regulator of South Africa at enquiries@inforegulator.org.za or 0800 017 160.
Your consent
By registering, you give explicit, timestamped consent for the Academy to process this information for the purposes above, in line with the Protection of Personal Information Act (POPIA). This consent is recorded separately from our general terms.
Requesting access, correction, or deletion
You can ask us to show you what we hold, correct it, or delete it at any time by contacting the Academy directly. We'll action this unless we're required to retain certain records for regulatory reasons, in which case we'll explain what must be kept and why.
Changes to this policy
We may update this policy from time to time as the portal or our regulatory obligations change. Material changes will be noted here with an updated review date.
Contact
Questions about this policy or your data can be directed to the Academy's Accountable Manager and Information Officer, Jean-Pierre Seger, at jp@nirvanaaero.com.