Access, correction and objection requests

Last updated 29 August 2026 · Version 1.0

POPIA gives you the right to know what we hold about you and your children, to have it corrected, and to object to what we do with it. This page is how you exercise those rights. There is no charge for a reasonable request.

What you can ask for

Your rights and the sections of POPIA they come from.
RightWhat it meansSection
ConfirmationWhether we hold personal information about you or your child at all23(1)(a)
AccessA copy of that information, and who we have given it to23(1)(b)
CorrectionFixing anything inaccurate, misleading or out of date24(1)(a)
DeletionErasing information that is irrelevant, excessive, or held without lawful grounds24(1)(b)
ObjectionObjecting, on reasonable grounds, to processing based on legitimate interests11(3)
Withdrawal of consentWithdrawing consent you previously gave11(2)(b)
ComplaintComplaining to the Information Regulator74

The quickest route

Most requests do not need us at all. Inside GradeLens you can see everything we hold, edit any learner or assessment, delete a single learner, or delete your whole account. That is faster than anything we can do by email.

Making a request to us

  1. Email admin@ellermon.com with POPIA data request in the subject line.
  2. Send it from the email address on your account where you can. That is the simplest way for us to know it is really you.
  3. Tell us which right you are exercising, and about whom — yourself, or a named child in your account. If you are asking on behalf of a child, confirm that you are their parent or legal guardian.
  4. Be as specific as you can about what you want. "Every assessment for Thandi in 2026" gets you a better answer than "my data".
  5. We acknowledge within 2 business days and respond within 30 days. If a request is unusually complex we may need longer, and we will tell you why before the deadline passes.

On identity checks. Before we hand over or change personal information we have to be satisfied you are who you say you are. If you can email from the account address, that is usually enough. If you cannot, we will ask for something else — and we will ask for the minimum that does the job, not a certified copy of everything.

Using the official forms

The Regulator publishes prescribed forms. You are welcome to use them, but you are not required to — a plain email works and we will not turn a request away for arriving in the wrong format.

All of them are available from https://inforegulator.org.za.

What we will send back

For an access request we provide your account details, every learner and their details, every subject, term, category, assessment and mark, and every calendar event — in a readable format, usually JSON or CSV with a plain-language summary. We also tell you which service providers have processed it. What we cannot give you is anything that would reveal another person's personal information.

If we say no

We may refuse a request in the limited circumstances POPIA and PAIA allow — for example where granting it would reveal someone else's personal information, or where a law requires us to keep a record. If we refuse, we will tell you which ground we are relying on and how to challenge it.

Complaining to the Regulator

If you are not satisfied with our response, you may complain to the Information Regulator (South Africa). You do not have to come to us first, though we would appreciate the chance to put it right.

Address
JD House, 27 Stiemens Street
Braamfontein, Johannesburg, 2001
P.O Box 31533, Braamfontein, Johannesburg, 2017