Privacy Policy & POPIA Governance

1. Overview & Scope

RecruitR Platform (Pty) Ltd ("RecruitR", "we", "us") respects your privacy and is committed to protecting your personal information in compliance with the Protection of Personal Information Act, No. 4 of 2013 ("POPIA") and the Promotion of Access to Information Act, No. 2 of 2000 ("PAIA").

2. Personal Information We Collect

Depending on your role on the platform, we collect:

• Job Seekers: Full name, South African ID / Passport number, contact details, curriculum vitae (CV), employment history, qualifications, and POPIA data processing consent records.
• RecruitRs: Full name, CIPC company registration details, SARS tax reference number, bank account details for commission payouts, and KYC compliance documentation.
• Employers: Company registration, VAT registration, contact billing details, and job descriptions.

3. Purpose of Data Processing

We process personal information strictly for legitimate recruitment and statutory compliance purposes:

• Matching job seeker profiles with active employer vacancies via subscribed RecruitRs.
• Generating monthly SARS EMP201 and annual IT3(a) contractor tax certificates.
• Processing commission payouts via secure South African electronic funds transfers (EFT).
• Maintaining audit logs for placement guarantee periods and POPIA consent management.

4. Your Data Subject Rights under POPIA

Under POPIA Sections 23 & 24, you have the right to:

• Access: Request confirmation of whether we hold personal information about you and receive a copy.
• Correction & Deletion: Request correction of inaccurate information or deletion of information no longer required.
• Objection: Object to processing of personal information for direct marketing purposes.
• Withdrawal of Consent: Withdraw your processing consent at any time from your account settings.

5. Third-Party Data Processors

We share data only with authorized, compliant operators under written Section 21 contracts:

• Supabase Inc. & Google Cloud: Secure database and storage hosting infrastructure.
• Mailchimp / Mandrill: Transactional email outbox notification dispatch.
• PayFast (Pty) Ltd: Payment gateway and subscription settlement.
• SARS (South African Revenue Service): Mandatory statutory tax returns where applicable.

6. Data Retention Periods

We retain personal information only for as long as necessary to fulfill recruitment placements or as required by South African statutory laws (e.g. 5-7 years for SARS tax records and Companies Act registers).