Privacy Policy

Last updated: 24 May 2026 · Applies under: Protection of Personal Information Act, 4 of 2013 (POPIA)

The Recruitment Directory ("we", "our", "the Service") respects your privacy and handles personal information in line with South Africa's Protection of Personal Information Act, 4 of 2013 ("POPIA"). This Policy explains what we collect, why, how we use it, who we share it with, and the rights you have over your data.

1. Responsible Party and Information Officer

The Responsible Party for the personal information processed through this Service is the operator of therecruitmentdirectory.co.za, whose registered entity details appear in the footer of every page. Our Information Officer for POPIA-related queries can be reached at admin@giveandgrow.co.za.

2. What we collect

We collect only the personal information needed to provide the Service:

• From agencies registering a listing: agency name and CIPC registration details, primary contact's name and role, agency email, phone, WhatsApp, website, business bio, specialties, and locations served; account password (stored hashed); subscription/billing identifiers (if applicable); uploaded logo image.
• From visitors sending enquiries to an agency: your name, email, optional phone, the message you compose, and whether you are an employer, candidate, or other agency. This is delivered to the agency you contacted; we retain a copy for support and abuse-monitoring.
• From visitors contacting us via the contact form: your name, email, subject, message.
• Automatic technical data: standard server logs (IP address, browser type, pages visited, timestamp) for security and basic anonymous traffic understanding. We do not run third-party advertising trackers.

3. Why we collect it (purposes and lawful basis)

• To operate the directory: displaying agency listings, routing enquiries to the correct agency, providing the admin/agency dashboards. Lawful basis: necessary to perform the contract with you.
• To verify agency credentials: confirming CIPC registration, APSO membership where claimed, contactability of the named contact. Lawful basis: legitimate interest in directory quality.
• To bill paid plans: processing R199/R599 monthly subscription payments via EFT (bank transfer). Lawful basis: contract performance.
• To prevent fraud and abuse: retaining logs and enquiry copies for a limited period to investigate spam, scraping, or impersonation. Lawful basis: legitimate interest.
• To comply with law: retaining records as required by tax, labour-services, or court-order obligations. Lawful basis: legal obligation.

4. Who we share it with

We share the minimum personal information necessary, only with the following categories of recipients:

• The agency you enquire with — enquiry data goes only to the recipient agency, not to other agencies or our marketing.
• Our infrastructure providers — Google Firebase (Cloud Firestore database, Cloud Storage, Identity Platform) hosts agency profiles, enquiries, and contact messages. Firebase processes data in the europe-west1 (Belgium) region.
• Our payment partner — payment processor receives only what's needed to bill paid plans (agency name, billing email, subscription ID). We do not store full card details ourselves.
• Our hosting provider — Hostinger serves the static files of this site.

We do not sell, rent, or share personal information with third parties for marketing.

5. Cross-border transfers

Some of our processors (notably Google Firebase) host data outside South Africa, in the EU (Belgium). The EU has a data-protection regime substantially similar to POPIA, and Google's standard contractual terms provide additional safeguards. You consent to this transfer by using the Service.

6. How long we keep your information

• Live agency profiles: until you close the listing or your subscription ends.
• Closed agency profiles: deleted within 30 days of closure; basic billing records retained for 5 years as required by the South African Revenue Service.
• Enquiries and contact messages: retained for 12 months for support and abuse-monitoring, then anonymised.
• Server logs: retained for 90 days, then deleted.

7. Your POPIA rights

Under POPIA you have the right to:

• Access the personal information we hold about you.
• Correct any inaccurate or out-of-date information.
• Delete your personal information (subject to legal retention requirements above).
• Object to processing on grounds of legitimate interest.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the South African Information Regulator at inforegulator.org.za if you believe we have mishandled your data.

To exercise any of these rights, email our Information Officer at admin@giveandgrow.co.za. We respond within 14 working days and never charge a fee for legitimate requests.

8. Security

We use industry-standard safeguards: HTTPS encryption in transit, encrypted storage at rest (Google Cloud encryption), password hashing (Firebase Auth), and least-privilege access controls. No system is perfectly secure; if we become aware of a personal-information breach affecting you, we will notify you and the Information Regulator as POPIA requires.

9. Cookies and analytics

We use a small number of essential cookies and browser storage items needed for the site to function (e.g. session storage to remember the brand intro has played, authentication tokens for logged-in users). We do not currently use analytics or advertising cookies. If we introduce any, we will update this Policy and obtain consent where required.

10. Children

The Service is intended for adults (recruiters, employers, working-age candidates). We do not knowingly collect personal information from children under 18. If you believe a child has submitted personal information, please contact us so we can delete it.

11. Changes to this Policy

We may update this Policy as our processing evolves. Material changes will be announced by email to registered agencies and via a notice on the homepage for 30 days before taking effect. The "Last updated" date at the top of this page always shows the most recent revision.

12. Contact

For privacy or POPIA queries, email admin@giveandgrow.co.za or use the contact form.