Privacy notice.
How RCMS Consultants CC handles personal information on this website and the RCMS Training Portal — in terms of the Protection of Personal Information Act, 2013 (POPIA).
Responsible party: RCMS Consultants CC ("RCMS", "we"), a South African occupational health, safety, environment and quality consultancy established in 1999. You can reach us about anything in this notice via the contact form.
What we collect, and why
On this website — only what you give us through the contact form (name, company, email, phone, your enquiry), used solely to respond to you. We don't run advertising trackers.
On the Training Portal (learn.rcms.co.za) — when you register we collect your full name, South African ID number, employer/company name, email address and a password (stored only as a secure hash). While you train we record course enrolments, lesson completion, assessment attempts and scores, and certificates issued to you.
We process this information to: provide your training and track your progress; print your name and ID number on your compliance certificate (this identifies the certificate holder, as employers, auditors and inspectors require); keep the training records that you and your employer need for OHS Act compliance; and respond to your enquiries.
Certificate verification — please note
Every certificate carries a unique certificate number. Anyone who has that number can confirm the certificate's status on our verification page, which displays the holder's name, the course, and the completion and expiry dates. This is the certificate doing its job — proving to an employer, auditor or inspector that it is genuine. Your ID number is never shown by the verification service.
Who we share it with
Where your training was arranged or paid for by your employer or a client company, we may share your enrolment status, progress, results and certificate details with that company for its compliance records. We do not sell personal information, and we don't share it with anyone else unless the law requires it.
Where it lives, and for how long
Training Portal data is stored in a secured database hosted by our cloud providers. Training records and certificates are retained for as long as they have compliance value — at least the validity period of the certificate plus the record-keeping periods good practice and the OHS Act's regulations expect. Contact-form enquiries are kept only as long as needed to handle them.
Your rights
You may ask us at any time to confirm what personal information we hold about you, to correct it, or — where we have no remaining legal grounds to keep it — to delete it. Use the contact form and we'll respond within a reasonable time. If you believe we've mishandled your information you may complain to the Information Regulator (South Africa) — inforegulator.org.za.
Security
Passwords are hashed, sessions are encrypted, traffic runs over HTTPS, and access to learner records is limited to RCMS administrators. No system is perfect; if a breach ever puts your information at risk we'll notify you and the Regulator as POPIA requires.
Last updated: June 2026. If we change this notice materially, we'll update this page.