A hiring privacy notice that fits South African recruitment
Recruitment Privacy is a document pack for businesses that collect candidate details through a careers page, web form, message, WhatsApp, or an external recruitment portal. It explains what information you collect, why you collect it, how long you keep it, who can see it, and what rights applicants have under South African law. That includes names, identity numbers, contact details, work history, qualifications, references, salary expectations and any supporting files uploaded with an application.
It is useful whether you hire once a year or process dozens of applications every week. The wording can be adapted for a small office in Gardens, a growing warehouse team in Bellville, or a multi-branch business with hiring across Cape Town, Stellenbosch and Paarl. If you recruit for remote roles nationally, the notice can be set up to cover online applications from anywhere in South Africa too.
What the Recruitment Privacy pack includes
This product is built to support the full candidate journey, not just the first form submission. It can include a privacy notice for applicants, retention wording, consent language where needed, internal handling notes, and practical clauses for recruiters and managers who access the information. If your process is more detailed, the pack can be extended to cover psychometric results, right to work checks, background screening, or agency referrals.
- Privacy notice for online applications and sent CVs
- Candidate data use and retention wording
- POPIA-aligned disclosures for collection and storage
- Optional clauses for screening, references and verification
- Plain-language text for careers pages and application forms
- Update support when your process or systems change
The aim is to keep the notice readable enough for applicants while still giving your business the detail it needs to stay compliant. You should not need a long legal explanation every time you add a new hiring step, and that is where careful customisation helps.
Best fit for businesses hiring online or in more than one branch
Recruitment Privacy suits companies that advertise roles on their site, use cloud-based HR systems, or let candidates apply from a phone on 3G while sitting in traffic on the N1. It also works well for businesses with seasonal hiring, franchise teams, hospitality groups, medical practices, logistics operators and offices that need to process personal information quickly and consistently.
If your team handles applications in more than one place, the notice can be set up so each site follows the same rules. That helps when one branch is in Sea Point, another in the CBD and another in Claremont, but HR still needs one standard way to collect and store applicant data. It is especially practical where several managers review the same vacancy, because access permissions and retention periods can be stated clearly from the start. A small typo in the process can lead to confusion later, so it pays to get this right early.
- Businesses with a careers page or online application form
- Employers using recruiters, agencies or referral links
- Teams that store CVs, interview notes and screening results
- Organisations with multiple branches or shared HR access
Setup, format and technical requirements
There is no hardware, power supply or gas connection needed for this product. Recruitment Privacy is a document and compliance setup, so the main requirement is that your hiring process is mapped properly. We need to know how candidates apply, where the data is stored, who can access it, and whether the business uses internal systems, third-party platforms or both. If your office has load-shedding backup, that does not change the wording, but it may affect how long devices and servers are kept on during recruitment periods.
The pack can be prepared for a basic one-page careers notice, a fuller policy page, or a set of notices used across several forms. File formats are handled so your content can sit neatly on a website, in a PDF handover pack, or in an internal compliance folder. If your team updates content in stages, we can work with that too, which is useful when the hiring process is changing and the final sign-off is still moving through management.
- Needs a clear recruitment flow and list of data fields
- Works with website forms, sent applications and portals
- Can be matched to your current HR or application system
- No physical installation, plumbing or electrical fitting required
Care, review and when to refresh the wording
Like any compliance document, Recruitment Privacy should be checked whenever the way you recruit changes. If you start using new assessment tools, an external recruiter, automated shortlisting, or a new applicant tracking system, the privacy notice may need an update. The same applies if your retention periods change, if you begin collecting extra information, or if a new law or internal process affects how data is handled.
It is also worth reviewing the document after staffing changes in HR or operations, especially where someone new takes over candidate handling. That keeps the wording aligned with what actually happens day to day. A once-a-year review is sensible for many businesses, but active recruiters may prefer a quicker check after each hiring cycle. We often see companies leave old wording in place for too long, then spend time fixing avoidable issues later.
- Review after a system change or new hiring channel
- Check retention periods for successful and unsuccessful candidates
- Update if you start sharing data with a new service provider
- Confirm who is responsible for applicant records internally
What to check before you order
Before ordering, gather the details of your recruitment process so the wording can be tailored properly. You should know what information you collect, whether you get consent where needed, how long you keep applications, and whether candidates can ask for deletion or correction. It also helps to know whether you recruit directly, through agencies, or both, and whether the same notice must cover permanent staff, fixed-term roles and interns.
For many businesses, the most important check is whether the document matches the real process rather than a best-case version of it. If your managers still print CVs, discuss applicants on WhatsApp, or save records on shared drives, that should be reflected honestly. The team at TsAndCs works from Gardens, Cape Town, and supports businesses nationwide, from small operators to larger organisations with more formal compliance needs. Luyanda Mbeki and the team can help you shape the notice so it is practical, not overcomplicated.
- List every place candidate data enters your business
- Confirm who reviews applications and who stores them
- Check if any third parties receive candidate information
- Make sure your careers page language matches the notice
Key facts
| Product type | Recruitment privacy notice and candidate data processing pack |
|---|---|
| Primary use | Online job applications, CV handling and hiring privacy disclosures |
| Compliance focus | POPIA-aligned candidate information wording |
| Format options | Short website notice, full policy page, or multi-part compliance pack |
| Business fit | Small businesses, multi-branch teams and national employers |
| Support | Customisation, review, updates and ongoing compliance support |
