Dubious POPIA Implementation for clients - WITHOUT PREJUDICE

I have elected to do the online schooling with Impaq for 2023 and they have called me to discuss this but refuse to discuss this with me after THEY call ME and when they do their security validation that you're talking to the correct person I will give them all my details except my ID number (I give the first six numbers). This shows a flagrant disregard for the POPI Act and the constitutional right to privacy when the agent REFUSED to continue the discussion or refer me to the Information Officer for the company. This could be a phishing, MITM or other impersonation attack, there is no way to know, until they are prepared to adjust their security standards and how they deal with their clients I am going to have a very suspicious view of their IT security posture and the related exposure of my information as a consumer of their services. The service is shocking and despite being asked for the IO's number, the call was terminated.