Privacy notice

Depending on how you deal with us, we collect:

• Contact details: your name, email address and phone number.
• Career information: your CV, work history, qualifications, references and salary expectations.
• Identity information: your identity number or passport number, where a role or a check requires it.
• Verification results, only where you have asked for them or a role requires them and you have agreed: criminal record, credit, identity, driving licence and qualification checks.
• Client contact details, if you are hiring: your name, company, phone number, email address and whatever you tell us in the enquiry form.

Criminal record information is special personal information under section 26 of POPIA. We only obtain it when you have given specific, written consent for a particular check, or where the law allows it for a specific role. We do not run checks speculatively, and a check is never a condition of being added to our database.

We use your information to match you to roles, to present you to employers with your agreement, to carry out checks you have consented to, to keep you informed about opportunities, and to meet our own legal and tax obligations.

Our lawful basis is your consent when you send us your information or agree to a check, and our legitimate interest in operating a recruitment business for the rest. You can withdraw consent at any time.

We share your information with:

• Employers, only with your agreement, and only the information needed to consider you for a specific role.
• Our own website records. When you submit the consultation form, your details are stored on this website so we can respond to you, and are visible to our staff in the site admin.
• WhatsApp, only if you choose it. After the form is submitted we offer to open WhatsApp with your enquiry already written out. Sending it is your choice, and it goes from your own WhatsApp account, so Meta handles that message under its own terms.
• Our recruitment system. Candidate applications and CVs are handled on our customer relationship management system at crm.appfirm.co.za, where that information is stored and worked on.
• Verification providers, where you have consented to a check.

We do not sell your information, and we do not share it for advertising.

We keep your information on access-controlled systems, restrict who can see it to the people who need it for your application, and encrypt credentials at rest. No system is perfect, and we will tell you and the Regulator if a breach affects you, as POPIA requires.

Under sections 23 and 24 of POPIA you have the right to:

• ask what personal information we hold about you, and get a copy;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information, or to stop using it;
• withdraw a consent you gave us; and
• object to us processing your information.

To do any of these, email our Information Officer using the address above. We will respond within a reasonable period and will not charge you for a correction.

If you are not satisfied with how we have handled your information, you can complain to the Information Regulator of South Africa.

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Complaints: complaints.IR@justice.gov.za
General enquiries: enquiries.IR@justice.gov.za