Cookies

COOKIE INFORMATION POLICY

1. INTRODUCTION

1.1 This policy is applicable to the websites of the MOUTON EDUCATION FOUNDATION NPC trading as CURRO (‘Curro’).
1.2 Data protection legislation and regulations (including without limitation the South African Protection of Personal Information Act, 2013 (POPIA) and the EU General Data Protection Regulation 2016/679 (GDPR), and all regulations thereunder) apply to the processing of cookies and require all website operators to inform website visitors about their usage of cookies and similar technologies, e.g. pixels, (hereinafter ‘cookies’), and collect visitors’ consent to such usage.
1.3 Curro is committed to protecting users’ privacy during their visits to its websites and recognises its responsibility to hold users’ information securely and confidentially.
1.4 When visiting a Curro website, Curro may collect information about a user that may not personally identify them, but may help improve the operation of the website. Such information may be collected through 'traffic data' and may entail the use of 'cookies', 'IP addresses' or other numeric codes used to identify a user’s computer.
1.5 Cookies are small text files located in browser directories and are commonly used on the internet.
1.6 It is important to note that most of the cookies used by Curro do not capture information that can personally identify website users. The information captured helps Curro improve the user experience of its websites and may include:
1.6.1 time and duration of visits to a Curro website;
1.6.2 pages viewed by users while on a Curro website;
1.6.3 URLs of the websites from which users arrive, or those to which they move on leaving the Curro website, to help Curro understand its visitor profile and/or recognise when a visitor has been directed to a Curro website by a partner website; or
1.6.4 analytical data to help Curro count the number of visitors to a website and better understand how visitors move around Curro websites.

2. HOW A CURRO WEBSITE USES COOKIES

2.1 Curro uses cookies for session management, analytical purposes, traffic management, and device identification. By using cookies and similar technologies, the information collected allows Curro to:
2.1.1 provide visitors with Curro products and services that are of interest;
2.1.2 verify a user’s identity when accessing login services;
2.1.3 manage Curro’s targeted online marketing activities;
2.1.4 give users a better online experience and track website performance; and
2.1.5 optimise the Curro website and make it more relevant to visitors’ needs.
2.2 Curro does not use cookies to track a user’s use of the internet or other websites, nor does Curro store any personal information in cookies that others could read and understand.
 
3. USE OF ESSENTIAL SECURITY COOKIES – GOOGLE RECAPTCHA

3.1. To ensure the integrity, availability, and confidentiality of our authentication mechanisms, we implement Google reCAPTCHA on specific pages of our platform, including but not limited to login and account recovery interfaces.
3.2. This security mechanism is designed to distinguish between human users and automated scripts (bots), thereby protecting our systems and the personal information of our users from brute-force attacks, credential stuffing, automated abuse, and other forms of unauthorised or malicious access.

4. CLASSIFICATION AS AN ESSENTIAL SECURITY CONTROL

4.1. The use of reCAPTCHA involves the placement of cookies and the collection of certain technical and behavioural data by Google. We acknowledge that such processing constitutes the handling of personal information under:
4.1.1. Sections 8(1) and 19(1) of POPIA, which require that processing be adequate, relevant, and not excessive to secure personal data;
4.1.2. Article 6(1)(f) of the GDPR, which permits processing based on legitimate interests where fundamental rights are not overridden;
4.1.3. Article 5(3) of the ePrivacy Directive (EU Directive 2002/58/EC), which permits strictly necessary cookies without user consent.
4.2. This implementation is deemed strictly necessary for the performance and security of our services and thus exempt from prior consent requirements under the aforementioned laws.

5. INTERNATIONAL USE AND JURISDICTIONAL CONSIDERATIONS

5.1. Although the Curro platforms are designed primarily for the residents of the Republic of South Africa (RSA), it is accessible to international users. Where applicable, users outside South Africa are hereby informed that:
5.1.1. Security-related cookies are deployed based on legitimate interest and strict necessity;
5.1.2. No personal data collected via reCAPTCHA is used by us for marketing, profiling, or behavioural analytics;
5.1.3. Data processed by Google is subject to Google's privacy policies and may involve cross-border data transfers under appropriate safeguards.

6. TRANSPARENCY AND LIMITATION OF PURPOSE

6.1. The Google reCAPTCHA service is implemented:
6.1.1. only on high-risk endpoints such as login, registration, and password reset;
6.1.2. solely to prevent abuse and ensure platform security;
6.1.3. in a manner that limits data collection to the minimum required for risk analysis.
6.2. For further details, please consult:
6.2.1. Google’s Privacy Policy: https://policies.google.com/privacy
6.2.2. The Curro Privacy Policy, which outlines how personal information is processed in accordance with POPIA and applicable international regulations.
 
7. HOW TO MANAGE COOKIES

7.1. In most cases, cookies are harmless, and users will only diminish their browsing experience by disabling them.
7.2. If cookies relating to a website are deleted, information about a user will not be stored, including cookie preferences, and the user will be treated as a first-time visitor when next visiting the website.
7.3. If a user would like to restrict or block the cookies Curro sets, this can be done through the user’s browser settings. The ‘help’ function within the browser should provide the information necessary to do this.
7.4. To find out more about cookies, including how to see which cookies have been set and how to manage them, visit www.allaboutcookies.org.
7.5. Please note that some parts of Curro’s websites may not function properly if cookies are rejected by a user.
7.6. BY ACCESSING AND USING THIS WEBSITE, THE USER CONSENTS TO THE USE OF THEIR INFORMATION FOR THE PURPOSES SET OUT ABOVE.

8. NOTICE OF POLICY CHANGES

8.1 From time to time, Curro may change this policy. The effective date of this policy, as stated below, indicates the last time this policy was revised or materially changed. Checking the effective date allows a user to determine whether there have been changes since the last time the policy was reviewed.

This cookie policy was last modified on 26 February 2026.