Privacy Policy

Grow-Link is the responsible party for personal information processed on this platform, including Student Living, FundConnect/Nexus and Grow-Link Pay.

Information Officer: Information Officer (to be confirmed) · privacy@grow-link.co.za · To be confirmed

• Identity: name, ID or passport number, a copy of your ID document (only with your consent), date of birth.
• Contact: email, phone number, next of kin.
• Study and funding: university, student number, course, funder (e.g. NSFAS, SAFCOL), allowances and payments.
• Residence: room and bed, lease, rent, maintenance reports, photos, bus notifications, internet speed tests.
• Special information (health or disability) only if you choose to tell us, and only to support you.
• Technical: sign-in records, device and browser, used for security.

• To house you and manage your lease — to perform our agreement with you.
• To approve and release funding with your university and funder — your consent and our agreement.
• To verify your identity and prevent fraud — legitimate interest and legal obligation.
• To send opportunity alerts — only with your separate, optional consent.

Only what each party needs: your university (approvals and student review), your funder (eligibility and payments), your landlord and their team (housing and maintenance), contractors (only the job details), and our banking partner (to release payments). We never sell your information.

Some service providers (hosting, email, AI assistance) may store data outside South Africa. We only use providers in countries or under agreements that give protection comparable to POPIA.

Students choose their consents in the Student Portal before first use and whenever this policy changes. Each choice is recorded with the date, policy version and device. Optional consents can be withdrawn at any time on the My privacy page.

• ID document copies: 12 months after you leave the residence or your application closes, then deleted.
• Payment and tax records: 5 years, as the law requires.
• Maintenance and lease records: 3 years after your lease ends.

ID documents are kept in private storage, opened only through links that expire after 5 minutes, and every view is logged. Access is limited by role: you, Grow-Link staff who need it, and staff of your own university. If a breach affects you, we will tell you and the Information Regulator as soon as reasonably possible.

You may ask for a copy of your information, ask us to correct or delete it, object to a use, or withdraw consent. Use the My privacy page in the Student Portal or email the Information Officer. We aim to respond within 30 days.

You may also complain to the Information Regulator: inforegulator.org.za · complaints.IR@inforegulator.org.za.

When we change this policy we update the version below and ask students to confirm their choices again.