Privacy Policy
Last updated: 27 July 2026
1. Introduction
RecruitSA ("we", "us", "our") is committed to protecting the privacy and personal information of all individuals who interact with our platform. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information in compliance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA") and the Promotion of Access to Information Act, 2000 (Act No. 2 of 2000) ("PAIA").
By using our website at recruitsa.co.za and our application platform at app.recruitsa.co.za (collectively, the "Platform"), you consent to the practices described in this policy.
2. Responsible Party
The Responsible Party for the purposes of POPIA is:
- RecruitSA
- Email: info@recruitsa.co.za
- Phone: +27 11 123 4567
- Address: Johannesburg, South Africa
- Information Officer: To be designated in accordance with Section 17 of POPIA
3.1 Information You Provide Directly
We collect personal information that you voluntarily provide when:
- Candidates applying for positions: Full name, email address, phone number, current job title, location, years of experience, salary expectation, LinkedIn URL, cover letter, and CV/resume document
- Recruiters and agency staff registering an account: Name, email address, password, role, and agency information
- Contact form submissions: Name, email address, company name, and message content
3.2 Information Collected Automatically
- IP address and browser type
- Pages visited and time spent on pages
- Referring website addresses
- Cookie identifiers (see our Cookie Policy)
3.3 Special Personal Information
CVs and resumes may contain special personal information as defined by POPIA, including but not limited to: race, gender, age, marital status, and health information. We process this information only with your explicit consent and solely for recruitment purposes.
4. Lawful Basis for Processing
We process personal information only when we have a lawful basis under POPIA, including:
- Consent: You have given explicit consent for the processing of your personal information for recruitment purposes
- Contract: Processing is necessary for the performance of a contract between you and us (e.g., providing recruitment services)
- Legal obligation: Processing is necessary to comply with a legal obligation
- Legitimate interest: Processing is necessary for our legitimate interests as a recruitment platform, provided your rights do not override these interests
5. Purposes of Processing
We process personal information for the following specific purposes:
- Recruitment services: Matching candidates with job opportunities, managing applications, and facilitating the hiring process
- Communication: Contacting candidates regarding job opportunities, interview scheduling, and application status updates
- Account management: Creating and managing user accounts for recruiters and agency staff
- Analytics and improvement: Analyzing platform usage to improve our services
- Legal compliance: Maintaining records as required by South African law
- CV distribution: Sharing candidate CVs with prospective employers (only with explicit consent)
6. Sharing of Information
We may share your personal information with:
- Client employers: When you have consented to your CV being distributed for specific job opportunities
- Job boards: PNet, Careers24, Indeed, Glassdoor, and LinkedIn — when posting jobs on your behalf
- Service providers: Cloud hosting (Cloudflare), email delivery services, and SMS providers — under data processing agreements
- Regulatory authorities: When required by law or court order
We do not sell your personal information to third parties.
7. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected:
- Candidate data: Retained for a maximum of 24 months from last interaction, unless consent is withdrawn earlier
- Application records: Retained for 12 months after the position is filled
- Account data: Retained for the duration of your account, plus 6 months after account closure
- Consent records: Retained for 3 years as proof of compliance
- CV documents: Deleted within 30 days of consent withdrawal or retention period expiry
You may request earlier deletion of your data at any time (see Section 9).
8. Security Safeguards
We implement appropriate technical and organisational measures to protect your personal information:
- Encryption: All data transmitted via HTTPS/TLS encryption (Cloudflare SSL)
- Access control: Role-based access with JWT authentication
- Firewall protection: Cloudflare WAF, rate limiting, and fail2ban intrusion prevention
- Database security: Encrypted password storage (bcrypt), restricted network access
- Regular backups: Automated database backups
- Staff training: Personnel trained on POPIA compliance
9. Your Rights Under POPIA
As a data subject, you have the following rights under POPIA:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information ("right to be forgotten")
- Withdrawal of consent: Withdraw consent at any time, without penalty
- Objection: Object to the processing of your personal information for direct marketing
- Complaint: Lodge a complaint with the Information Regulator
To exercise any of these rights, contact us at privacy@recruitsa.co.za. We will respond within 30 days as required by POPIA.
10. Cookies
We use cookies to improve your browsing experience. For detailed information about the cookies we use and your choices, please see our Cookie Policy.
11. Children's Information
Our services are intended for individuals aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
If you have any questions about this Privacy Policy or wish to exercise your rights under POPIA, please contact:
You may also lodge a complaint with the Information Regulator: