Privacy Policy

1. Who This Policy Applies To

• Employers who register on the VulaJobs app, and anyone using an employer's account.
• Workers whose employer has added them to VulaJobs. A worker's information is held for their employer, who is the responsible party for it under POPIA; we process it on the employer's behalf. Our POPIA notice explains what that means for workers.
• Visitors to this website, and anyone who contacts us.

2. Information We Collect

About employers

• Account information — your name, email address, cell number and password, and for a household employer your identity number; for a business, its name, registration and VAT numbers and contact details.
• Employer registrations — your address, UIF reference number, COIDA registration number, and documents you upload, such as a Letter of Good Standing.
• Billing information — your subscriptions and the payments you make. Card payments are handled by Paystack. We do not see or store your card number; we keep only the reference Paystack gives us to charge the card you authorised.
• Signatures — your signature on contracts, with the time, the device and the IP address it was given from, as evidence of the signature.
• Usage and technical information — sign-in attempts, the device token used to send you notifications, and the technical information needed to run and secure the service.

About workers

What an employer records about their worker — identity, contact and bank details, contract, schedule, leave, pay and UIF information — is listed in our POPIA notice and in our Data Protection Policy, along with what VulaJobs adds itself: the worker's signature and confirmation of their details, and their report of a problem with a payment.

From anyone who contacts us

Your name, contact details and what you tell us.

3. How We Use It

• to create and run your account and provide VulaJobs's features;
• to produce contracts, payslips, timesheets and UIF declaration files, and to work out pay, leave and deductions;
• to send workers the messages their employment needs, and to send employers notifications about their account and their workers;
• to process subscription payments and payments to workers through Paystack;
• to answer your questions and provide support;
• to keep VulaJobs secure, find and fix problems, and improve it;
• to meet our own legal obligations.

We send employers marketing only if they have agreed to receive it, and anyone can withdraw that consent at any time. We never send marketing to workers.

4. Legal Basis

Under section 11 of POPIA we process personal information because it is:

• necessary to perform our contract with you, or to take steps you asked for before entering into it;
• required to comply with a legal obligation — ours, or for workers' information, the employer's;
• in a legitimate interest — such as keeping the service secure — that does not override your rights; or
• done with your consent, which you can withdraw at any time.

5. Who We Share It With

We do not sell personal information. We share it only with the service providers who help us run VulaJobs, and only as far as they need it to do so:

• our cloud hosting provider, which stores the Platform and its information in South Africa;
• Paystack, to process payments — and, before a worker is paid through VulaJobs, to check that the bank account belongs to the worker by matching it to their identity number;
• WhatsApp (Meta), to deliver messages to workers;
• our email and push-notification providers, to send employers emails and notifications.

Each is listed, with where it processes information, in our Data Protection Policy. A worker's details are also shown to their employer, and information the employer chooses to declare goes to the Unemployment Insurance Fund in the file the employer submits. We may disclose information where the law requires it, or to protect our legal rights.

6. How Long We Keep It

• Employment records — workers' details, contracts, schedules, leave, pay, payslips, timesheets and UIF declarations — are kept for three years after the employment ends, because the Basic Conditions of Employment Act requires them to be kept for that long. They are then permanently deleted.
• Your account is kept while it is open, and after it is closed for as long as any employment records on it are still kept.
• Our own billing records are kept for as long as tax law requires.
• Messages to us are kept only as long as needed to deal with them.

Full details are in our Data Protection Policy.

7. Security

We use reasonable technical and organisational measures to protect personal information against loss, unauthorised access, disclosure and misuse — among them, identity numbers, addresses and bank account numbers are encrypted where they are stored. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If information is compromised, we will notify the people affected and the Information Regulator as POPIA requires. See our Data Protection Policy.

8. Your Rights

You have the right to know what personal information we hold about you, to ask for a copy, to ask for it to be corrected or deleted, to object to its processing, and to complain to the Information Regulator. Objecting and asking for a correction are free, and you can ask in whatever way suits you. Our POPIA notice explains each right and how to use it, and gives the Information Regulator's contact details.

9. This Website, Cookies and the App

This website does not use cookies, analytics or advertising trackers, and does not load fonts or scripts from third parties. Our hosting provider records basic technical information, such as IP addresses, to deliver the site and protect it from abuse.

The VulaJobs app keeps you signed in by storing a sign-in token in your device's encrypted storage, and registers your device to receive notifications if you allow them. It does not track you across other apps or websites.

10. Processing Outside South Africa

VulaJobs is hosted in South Africa. Our messaging, email and push-notification providers, and to some extent Paystack, process information outside South Africa. Where that happens we rely on section 72 of POPIA, as set out in our Data Protection Policy.

11. Children

An employer must be at least 18 to use VulaJobs. Where an employer employs a worker under 18, that worker's information is handled as our Data Protection Policy describes.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always on this page, with its version date. Where a change materially affects you, we will tell you in the app.

13. Contact Us

For any questions or requests about this Privacy Policy, contact our Information Officer at: