Privacy Policy

1About this Policy

This Privacy Policy explains how Eezyverify (Pty) Ltd, trading as PlacementPlus (“PlacementPlus”, “we”, “us” or “our”), collects, uses, shares, stores and protects personal information. It applies to website visitors, prospective and current clients, candidates and job applicants, users, vendor and recruitment partners, referees, representatives of public bodies and other people whose information we process through our services.

“Personal information”, “processing”, “data subject”, “responsible party”, “operator” and “special personal information” have the meanings given in the Protection of Personal Information Act 4 of 2013 (“POPIA”).

2When PlacementPlus is responsible party or operator

PlacementPlus is the responsible party when we decide why and how information is processed—for example, for our public website, prospective-client enquiries, account administration, candidate marketplace features we determine, partner administration, billing, platform security, service improvement, legal compliance and our own communications.

An employer, recruiter, government body or other client is usually the responsible party when it determines the purposes of a recruitment, application, assessment, verification or onboarding process. PlacementPlus then acts as its operator and processes information on documented instructions. The client’s privacy notice and our agreement with that client also apply. Questions about a particular vacancy or hiring decision should normally be directed to that client; we will assist the client with requests as required.

3Information we may process

• Identity and eligibility information: name, date of birth, identity or passport number, nationality, photograph, signature, work eligibility and identifiers needed to verify identity.
• Contact and account information: addresses, email, telephone number, login, organisation, role, preferences and authentication/security data.
• Candidate and employment information: CV, work history, skills, salary or availability information, references, job preferences, applications, interview notes, offers and onboarding records.
• Education and professional information: qualifications, academic records, licences, registrations and professional-body membership.
• Assessment information: responses, scores, psychometric or competency outputs, structured interview and video-assessment content, reviewer notes and suitability indicators.
• Verification and screening information: identity, criminal-behaviour, credit, driving, employment, qualification, sanctions or other results requested for a lawful role-related purpose.
• Marketplace and badge information: profile fields, verification status, visibility choices, employer interactions and Verified Badge status.
• Client, supplier and partner information: business contact details, authority, contracts, instructions, usage, support, billing and KYC information.
• Website and device information: IP address, browser/device details, identifiers, pages and actions, timestamps, referrer, consent choices, diagnostics, security events and similar telemetry.
• Communications: enquiries, demo/trial requests, support tickets, surveys, feedback, calls or correspondence where lawfully recorded.
• Inferences and workflow outputs: matches, rankings, risk flags, scores or recommendations produced from the information above, subject to the safeguards in section 10.

4Special personal information and sensitive screening

Some services may process special personal information or other sensitive information. Criminal-behaviour information is special personal information under POPIA. Depending on the content and technology used, biometric, health, religious, political, trade-union or sex-life information may also be special personal information.

We process such information only where the client has a lawful, necessary and role-related purpose; the processing is proportionate; the data subject has received appropriate notice; and access, retention and disclosure are restricted. Credit information is requested only where lawful, relevant and permitted for the role or purpose. We do not ask candidates to provide unrelated special personal information.

5Where information comes from

• Directly from you, including forms, uploads, interviews, assessments and communications.
• From the employer, recruiter, government body or other client managing a process.
• From referees, former employers, educational institutions, professional bodies and verification providers.
• From authorised public or official sources such as CIPC, the Central Supplier Database, regulators or lawful registers.
• From recruitment and vendor partners, integrations and service providers.
• Automatically from your use of the website or platform, including cookies and operational logs, as described in the Cookie Policy.

6Why we process information

• Provide, configure and support recruitment, application, screening, assessment, verification, interview, offer and onboarding workflows.
• Create and administer accounts, profiles, marketplace visibility and Verified Badge features.
• Confirm identity, qualifications, experience, licences, references, role suitability and authorised background checks.
• Match candidates and opportunities, structure workflows, calculate role-related scores and support human decision-making.
• Process demo, trial, sales, client, vendor-partner and support enquiries.
• Operate, secure, troubleshoot, audit and improve the website and platform; prevent fraud and misuse.
• Send service, security and transactional communications and, where permitted, marketing communications.
• Manage contracts, instructions, billing, records, complaints, disputes and legal obligations.
• Produce aggregated or de-identified statistics that do not reasonably identify a person.

7Lawful justification

Depending on the context, we process information with consent; to conclude or perform a contract with the data subject; to comply with a legal obligation; to protect a legitimate interest of the data subject; to pursue a legitimate interest of PlacementPlus, a client or a third party to whom the information is supplied; or, for a public body, to perform a public-law duty. We assess necessity, proportionality and reasonable expectations and apply any additional POPIA requirements for special information, children, direct marketing, credit reporting, automated decisions and cross-border transfers.

Where consent is the basis, it may be withdrawn prospectively. Withdrawal does not affect processing already lawfully completed and may mean a voluntary feature or check cannot continue. A client remains responsible for confirming the lawful basis for checks it instructs us to perform.

8If information is not provided

Fields marked as required are necessary for the stated service or process. If required information or an authorisation is not provided, we or the relevant client may be unable to verify identity, complete a check, assess an application, open an account or provide the requested service. We will not treat optional marketing consent as a condition of receiving an unrelated service.

9Sharing personal information

We disclose personal information only where necessary and lawful, including to:

• The relevant employer, recruiter, government body or client, and authorised users acting for it.
• Candidates or referees where needed to conduct a process and consistent with confidentiality.
• Identity, criminal, credit, qualification, employment, driving, professional-body, assessment and other verification providers.
• Vendor, recruitment and implementation partners involved in the authorised service.
• Hosting, cloud, communications, identity, cybersecurity, analytics, AI/model, support, document-signing, payment and other technology suppliers acting under appropriate terms.
• Professional advisers, auditors, insurers and funders subject to confidentiality.
• Regulators, courts, law-enforcement bodies or other authorities where required or permitted.
• A prospective purchaser, investor or successor in a reorganisation or transaction, subject to appropriate confidentiality and lawful-processing safeguards.

We do not sell personal information. We require operators to process information only on authorised instructions, protect it and assist with security incidents, rights requests and deletion. A current list of material sub-operators may be requested at privacy@placementplus.co.za.

10Scoring, matching and automated decision support

PlacementPlus may use rules, algorithms and AI-assisted tools to organise applications, compare role-related criteria, flag missing information, support verification and produce matches, rankings, scores or recommendations. Inputs may include experience, qualifications, assessment responses, verified credentials and client-defined requirements. These outputs can affect which applications receive attention or require review.

PlacementPlus tools are intended to support, not replace, accountable human judgement. Where section 71 of POPIA applies, a decision with legal or similarly significant effects will not be based solely on automated processing unless a permitted exception and suitable safeguards apply. Data subjects may request meaningful information about the factors considered, correct inaccurate inputs, express their view and ask the responsible client for human reconsideration. Contact privacy@placementplus.co.za and identify the relevant vacancy or client.

11Cross-border processing

Some suppliers, systems or authorised recipients may process information outside South Africa. We permit this only where section 72 of POPIA is satisfied—for example, the recipient is subject to a law, binding corporate rules or agreement that provides an adequate level of protection; the transfer is necessary for a permitted contract or interest; or the data subject consents where appropriate. We use contractual, access, security and data-minimisation safeguards and assess sensitive transfers with additional care.

12Direct marketing and communications

We may send service and security messages necessary for an account or requested service. We send unsolicited electronic marketing only as permitted by POPIA, including with the required consent or to an existing customer regarding our own similar services, and we identify the sender and provide a free, simple opt-out. You may object to direct marketing at any time by using the unsubscribe mechanism or emailing privacy@placementplus.co.za. We keep a minimal suppression record so we can honour the objection.

13Cookies and similar technologies

The website uses cookies, local storage and similar technologies for essential operation, preferences, security and—only where activated and permitted—analytics or advertising. Details and controls are in the PlacementPlus Cookie Policy at placementplus.co.za/cookie-policy. Optional technologies must not operate before the required consent.

14Security

We maintain reasonable technical and organisational safeguards appropriate to the sensitivity and risk of the information. These may include encryption in transit and at rest, role-based access, multi-factor authentication, environment separation, logging, monitoring, backups, supplier due diligence, vulnerability management, secure development and incident response. No system is completely secure. Public security statements apply only to the controls actually implemented and are reviewed for accuracy.

15Retention

We retain identifiable information only for the time needed for the purpose, client instructions, legal obligations, security, dispute handling or the protection of rights. We then delete, securely destroy or de-identify it. Unless a contract, law or approved system schedule requires a different period, the following are our publication defaults:

Where PlacementPlus acts as operator, the responsible client’s authorised retention instruction prevails, subject to law. Backup copies are isolated from ordinary use and expire through controlled rotation.

16Your rights

Subject to POPIA and any lawful limitations, you may:

• Ask whether we hold your personal information and request access to it.
• Request correction, completion, deletion or destruction of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information.
• Object on reasonable grounds to processing based on a legitimate-interest justification, and object at any time to direct marketing.
• Withdraw consent where processing relies on consent.
• Request human review or raise concerns about qualifying automated decisions.
• Complain to the responsible client, PlacementPlus or the Information Regulator.
• Institute civil proceedings where POPIA permits.

Send a request to privacy@placementplus.co.za. Please identify yourself and the relevant account, vacancy or client. We may request proportionate proof of identity and authority. We aim to acknowledge promptly and respond within the period required by law; complex or client-controlled requests may require coordination. Official POPIA Form 1 (objection) and Form 2 (correction/deletion) are available at inforegulator.org.za/popia-forms/.

17Security compromises

If there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, the responsible party will notify the Information Regulator and affected data subjects as soon as reasonably possible, subject to any lawful delay. When PlacementPlus acts as operator, we notify the responsible client without undue delay in accordance with the agreement and support its investigation and notices.

18Children

The website and standard recruitment services are not directed to children under 18. We do not knowingly create marketplace accounts for children. If a lawful client process requires information about a child, the responsible party must establish an applicable section 35 basis or Regulator authorisation, provide an age-appropriate notice and use heightened safeguards. Contact us if you believe a child’s information was provided without authority.

19Third-party sites and client processes

Links, embedded services and client-controlled recruitment processes may have separate privacy notices. PlacementPlus is not responsible for a third party’s independent processing. Review the relevant notice before providing information.

20Changes to this Policy

We may update this Policy to reflect changes in law, technology, suppliers or services. We will publish the effective date and, where a change is material, provide an appropriate notice. Earlier versions may be requested from privacy@placementplus.co.za.

21Contact and complaints

PlacementPlus Information Officer / Privacy Office
Eezyverify (Pty) Ltd, registration 2026/041935/07
Mulberry Hill Office Park, Broadacres Drive, Dainfern, Johannesburg, 2191, South Africa
Email: privacy@placementplus.co.za
Website: placementplus.co.za

Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Telephone: 010 023 5200 | Toll-free: 0800 017 160
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
Website: inforegulator.org.za/contact-us/