Privacy Policy

Afrikye Recruitment (Pty) Ltd ("Afrikye", "we", "us" or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, share and protect your personal information in the course of providing our recruitment services and operating our website at www.afrikye.co.za (the "Website").

This Privacy Policy is published in compliance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA") and the regulations made under it. It also reflects our broader commitment to handling personal information lawfully and transparently.

By engaging with us as a candidate, client, supplier, partner or website visitor, you acknowledge that you have read and understood this Privacy Policy.

Afrikye Recruitment (Pty) Ltd is a private company incorporated in the Republic of South Africa, conducting business as a specialist recruitment agency. We are a 100% Black-Youth-Owned and managed enterprise, accredited as a Level 1 B-BBEE contributor.

For the purposes of POPIA, Afrikye is the "responsible party" in respect of the personal information we process.

Our designated Information Officer in terms of POPIA is:

The Information Officer is responsible for the oversight of our compliance with POPIA, including responding to data subject requests, managing complaints and liaising with the Information Regulator. The Information Officer is registered with the Information Regulator in accordance with section 55 of POPIA.

We collect and process the following categories of personal information, depending on whether you engage with us as a candidate, a client representative, or otherwise.

We collect personal information from the following sources:

• Directly from you, when you submit a CV, complete an application, respond to our outreach, or contact us
• From recruitment platforms on which you have publicly listed your CV or professional profile, including Pnet, Careers24, CareerJunction and LinkedIn
• From referees and previous employers nominated by you to provide references
• From accredited verification providers, including V-Report, for background checks conducted with your consent
• From psychometric assessment providers, where applicable and with your consent
• From client organisations who refer candidates to us
• From publicly available sources, including professional networking platforms and published professional directories

We process your personal information for the following purposes:

• To provide our recruitment services to clients and candidates
• To assess your suitability for vacancies for which you are being considered
• To conduct background verification and reference checks where required
• To facilitate your placement with a prospective employer, including by sharing your CV and assessment information with that employer
• To comply with our legal, regulatory and contractual obligations
• To respond to your enquiries and to communicate with you
• To send you information about vacancies and recruitment opportunities that may be relevant to you, where you have consented or where we are otherwise permitted to do so
• To maintain and improve our recruitment database, including for future opportunities
• To enforce our terms of business and protect our legitimate rights and interests
• For the establishment, exercise or defence of legal claims

We rely on the following legal grounds under POPIA for processing your personal information:

• Your consent. Where you have given us specific, informed and voluntary consent to the relevant processing activity
• Performance of a contract. Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract
• Compliance with a legal obligation. Where we are required by law to process your personal information
• Legitimate interests. Where the processing is necessary for the pursuit of our legitimate interests or those of a third party (including a prospective employer), provided these are not overridden by your interests or fundamental rights and freedoms

In limited circumstances, and only with your explicit consent or where otherwise permitted by POPIA, we may process special personal information about you, including:

• Criminal record information, as part of background verification conducted with your consent
• Health information, where this is relevant to a specific role and has been voluntarily disclosed by you
• Biometric information, where required for the verification of identity or where required by a specific client or role
• Race or ethnic origin, where you provide it for B-BBEE reporting or employment equity purposes

We may share your personal information with the following categories of recipients:

• Prospective employers (our clients). Where we consider you a suitable candidate for an active vacancy, we will share your CV and relevant assessment information with the client organisation. We do this with your consent, obtained at the point you engage with us as a candidate.
• Background verification providers, including V-Report, for the purpose of conducting authorised background checks.
• Reference providers, being the individuals you nominate as professional references.
• Service providers and operators. Including providers of information technology, software, cloud hosting, professional advisors (legal, accounting, audit), and others who support our operations. These parties are contractually required to handle your personal information in accordance with POPIA.
• Regulatory and law enforcement authorities, where we are required to do so by law, court order or in response to a lawful request.
• Acquirers and successors. In the event of a sale, merger or restructuring of our business, your personal information may be transferred to the acquiring or successor party, subject to appropriate confidentiality protections.

We do not sell your personal information to third parties.

Where we provide international recruitment or expatriate placement services, your personal information may be transferred outside the Republic of South Africa to prospective employers, immigration service providers, relocation service providers or other recipients located in jurisdictions whose data protection laws may differ from those of South Africa.

We transfer personal information cross-border only where one or more of the conditions in section 72 of POPIA applies, including:

• You have consented to the transfer
• The transfer is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract
• The recipient is subject to a law, binding corporate rules or a binding agreement that provides an adequate level of protection of personal information
• The transfer is for your benefit and it is not reasonably practicable to obtain your consent, but if it were reasonably practicable to obtain consent, you would be likely to give it

We take reasonable and appropriate technical and organisational measures to safeguard your personal information against loss, damage, unauthorised access, alteration or disclosure. These measures include:

• Restricted access to personal information on a need-to-know basis
• The use of secure professional platforms, encrypted communication channels and reputable software providers
• Confidentiality obligations binding on all employees, contractors and operators
• Documented information security and data retention policies
• Regular review of our information security practices

No method of transmission over the internet, and no method of electronic storage, is entirely secure. We cannot guarantee absolute security, but we commit to handling your personal information with appropriate care.

In the event of a security compromise involving your personal information, we will notify you and the Information Regulator in accordance with section 22 of POPIA.

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, regulatory, tax or contractual retention requirements. Indicative retention periods are as follows:

You may request that we delete your personal information sooner than the above periods, subject to our overriding legal or regulatory obligations to retain it.

Under POPIA, you have the following rights in respect of your personal information:

• Right of access. To request confirmation of whether we hold personal information about you, and to request access to that information
• Right to correction. To request that we correct or update personal information that is inaccurate, incomplete, misleading or out of date
• Right to deletion. To request that we delete personal information that we no longer have lawful grounds to retain
• Right to object. To object, on reasonable grounds, to the processing of your personal information, including for the purposes of direct marketing
• Right to withdraw consent. Where we are relying on your consent as the basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal
• Right to lodge a complaint. To lodge a complaint with the Information Regulator if you believe we have not complied with our obligations under POPIA

To exercise any of these rights, please contact our Information Officer using the details in section 3 above. We will respond to your request within a reasonable period and, in any event, within the time periods prescribed by POPIA.

Requests under section 23 of POPIA (right of access) should be made using the prescribed form (Form 2 of the POPIA Regulations), which is available on the Information Regulator's website at inforegulator.org.za.

We may send you information about our services, recruitment opportunities, market insights or related material by electronic communication, subject to your consent or as otherwise permitted under POPIA and the Consumer Protection Act, 2008.

You have the right to object to direct marketing at any time. Every direct marketing communication we send includes an unsubscribe link or mechanism. You may also contact our Information Officer directly to opt out of direct marketing.

Our Website uses cookies and similar tracking technologies. The cookies we use, the purposes for which we use them, and how you can manage your cookie preferences are set out in our separate Cookies Policy.

Our services are not directed at, and we do not knowingly collect personal information from, persons under the age of 18. If you believe that a person under the age of 18 has provided us with personal information without appropriate parental or guardian consent, please contact our Information Officer and we will take steps to delete that information.

Our Website may contain links to third-party websites and platforms. We are not responsible for the privacy practices or content of those third-party sites, and this Privacy Policy does not apply to them. We encourage you to read the privacy policies of any third-party site you visit.

If you have a concern about how we have handled your personal information, please first contact our Information Officer using the details in section 3. We take all complaints seriously and will respond promptly.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator:

We may update this Privacy Policy from time to time to reflect changes in our practices, in applicable law, or for other operational reasons. The current version is available on our Website. Where changes are material, we will bring them to your attention through appropriate means.

For any questions about this Privacy Policy, or about how we handle your personal information, please contact our Information Officer: