_edited.png)
Privacy Policy
Last Updated: August 2026
1. Introduction
iSanqa Investments (Pty) Ltd ("iSanqa", "we", "our" or "us") respects your privacy and is committed to protecting the personal information entrusted to us by candidates, contractors, clients, employees, prospective employees, service providers and visitors to our website
This Privacy Policy explains how iSanqa collects, uses, stores, processes and discloses personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable laws. POPIA establishes requirements for the lawful processing of personal information by organisations operating in South Africa.
This Privacy Policy applies to personal information collected through our website, recruitment and application processes, contractor and workforce administration activities, and other legitimate business interactions with iSanqa.
2. About iSanqa
iSanqa Investments (Pty) Ltd provides recruitment, workforce administration, contractor management, payroll administration and related business services.
For purposes of POPIA, iSanqa may act as a responsible party when determining the purposes and means of processing personal information, and may also process personal information on behalf of clients or other organisations in accordance with applicable contractual arrangements.
The nature of our role will depend on the service being provided and the relationship with the relevant individual or organisation.
3. Personal Information We May Collect
Depending on the nature of our relationship with you, we may collect and process different categories of personal information.
3.1 Identification and Contact Information
-
First name and surname
-
Email address
-
Telephone or mobile number
-
Physical or postal address
-
Identification or other identification details where legitimately required
-
Other information necessary to identify or communicate with you
3.2 Recruitment and Employment Information
-
CV and résumé information
-
Employment history
-
Qualifications and professional certifications
-
Skills and professional experience
-
References
-
Employment preferences
-
Availability and notice period
-
Remuneration information where relevant to a recruitment process
-
Interview and assessment information
-
Supporting documentation relevant to a position or engagement
3.3 Contractor and Workforce Information
-
Identification information
-
Employment and engagement details
-
Assignment information
-
Timesheets and attendance information
-
Remuneration and payroll information
-
Banking details where required for payment
-
Tax and statutory information
-
Leave and other employment-related information
-
Information required to administer contractual and statutory obligations
3.4 Client and Business Contact Information
-
Name and contact details
-
Job title and business information
-
Correspondence and communications
-
Contractual and commercial information
-
Information necessary to manage the business relationship
3.5 Website and Technical Information
When you visit our website, certain technical information may be collected automatically depending on the website configuration and technologies in use.
-
IP address
-
Browser type and version
-
Operating system and device information
-
Pages visited
-
Date and time of access
-
Referring website
-
General website interaction information
-
Other technical information necessary for website security, functionality and performance
We do not use website technical information for purposes unrelated to legitimate business, security, operational or analytical requirements.
4. How We Collect Personal Information
-
Directly from you
-
When you submit a CV or application
-
When you communicate with us by email, telephone or other communication channels
-
When you interact with our website
-
From references or other authorised sources during recruitment processes
-
From clients or prospective employers where relevant to a recruitment or contractor process
-
From contractors and employees as part of onboarding and workforce administration
-
From service providers where necessary for legitimate business purposes
-
From publicly available sources where permitted by law and appropriate for the relevant business purpose
Where practical and appropriate, we will seek to collect personal information directly from the individual to whom it relates.
5. Why We Process Personal Information
We process personal information only where there is a lawful and legitimate reason to do so. Depending on the circumstances, personal information may be processed for the purposes below.
5.1 Recruitment and Placement
To:
-
Assess candidates for employment opportunities
-
Identify suitable candidates for available positions
-
Communicate with candidates
-
Arrange interviews and assessments
-
Conduct reference or background checks where appropriate and legally permitted
-
Provide candidate information to prospective employers or clients where permitted and appropriate
-
Manage recruitment and placement processes
5.2 Contractor and Workforce Administration
To:
-
Administer contractor engagements
-
Manage assignments
-
Process timesheets
-
Administer remuneration and payments
-
Administer payroll and statutory obligations
-
Manage leave and employment-related administration
-
Communicate with contractors, clients and relevant service providers
5.3 Client and Business Services
To:
-
Provide contracted services
-
Manage client and supplier relationships
-
Communicate with business contacts
-
Administer contracts and commercial arrangements
-
Process invoices and payments
-
Maintain appropriate business records
5.4 Website and Security
To:
-
Operate and maintain our website
-
Monitor website performance
-
Identify and address technical problems
-
Protect our website and systems against misuse or security threats
-
Improve the functionality and user experience of our website
5.5 Legal and Regulatory Compliance
To:
-
Comply with applicable laws and regulations
-
Meet tax, employment and statutory obligations
-
Respond to lawful requests from regulatory or government authorities
-
Establish, exercise or defend legal rights
-
Maintain records necessary to demonstrate compliance
5.6 Business Administration and Improvement
To:
-
Maintain business records
-
Analyse and improve our services and processes
-
Manage internal operations
-
Conduct appropriate business reporting and analysis
-
Protect the legitimate interests of iSanqa, our clients and other stakeholders
6. Lawful Basis for Processing
iSanqa processes personal information in accordance with the lawful processing requirements of POPIA.
Depending on the circumstances, processing may be based on consent, contract, legal obligation, legitimate interests, protection of an individual’s legitimate interest, legal claims, or another lawful basis permitted under applicable legislation.
-
your consent;
-
the performance or conclusion of a contract;
-
compliance with a legal obligation;
-
legitimate business interests where permitted by law;
-
protecting a legitimate interest of the individual;
-
processing necessary to pursue or defend legal claims; or
-
another lawful basis permitted under applicable legislation.
Where consent is required, we will request it in an appropriate manner. Where processing is based on consent, you may withdraw your consent, subject to legal and contractual limitations and the consequences of doing so.
7. Recruitment and Candidate Information
If you submit your CV or personal information to iSanqa for recruitment purposes, we will process that
information for legitimate recruitment and related employment purposes.
Your information may be considered for suitable current or future opportunities where this is appropriate and permitted.
Where your information is presented to a client or prospective employer for a specific opportunity, this will be done in accordance with applicable legal requirements and the relevant recruitment process.
Candidate information will only be accessed by authorised persons who require access for legitimate business purposes.
We will take reasonable steps to ensure that candidate information is accurate and relevant to the purposes for which it is processed.
8. Sharing Personal Information
iSanqa does not sell personal information.
We may disclose or provide access to personal information where necessary for legitimate business purposes, including:
8.1 Clients and Prospective Employers
Where relevant to recruitment, placement or contractor services, personal information may be shared with
clients or prospective employers in accordance with applicable legal requirements and, where required, with the appropriate consent or other lawful basis.
8.2 Service Providers
We may use third-party service providers to support our business operations.
These may include providers of:
-
Recruitment and applicant-management services
-
Payroll and workforce administration services
-
Accounting and financial services
-
Document and cloud-storage services
-
Communication and collaboration services
-
Website hosting and technical services
-
Payment services
-
Other business-support services
Where third parties process personal information on our behalf, we take reasonable steps to ensure that
appropriate contractual, privacy and security requirements apply.
8.3 Legal and Regulatory Requirements
We may disclose personal information where required or permitted by law, including in response to:
-
lawful requests from regulatory authorities;
-
court orders;
-
statutory obligations; or
-
requests from law-enforcement authorities where legally valid.
8.4 Protection of Rights and Security
We may process or disclose information where reasonably necessary to:
-
protect the rights, property or safety of iSanqa;
-
protect our clients, employees, contractors or other stakeholders;
-
investigate suspected fraud, misuse or unlawful activity; or
-
establish, exercise or defend legal claims.
9. Third-Party Service Providers
iSanqa uses third-party service providers to support its business operations
These providers may process personal information on our behalf or provide systems through which personal information is stored, transmitted or otherwise processed.
We take reasonable steps to select appropriate service providers and to ensure that relevant privacy and security requirements are addressed.
Where a service provider processes information on behalf of iSanqa, its access to personal information will be limited to what is reasonably required to provide the relevant service.
The security and processing practices of third-party providers are also subject to their own contractual terms, privacy policies and technical controls.
10. International Transfers
Some of our third-party service providers or technology platforms may process or store information outside South Africa.
Where personal information is transferred to or processed in another country, iSanqa will take reasonable steps to ensure that the transfer and subsequent processing comply with applicable POPIA requirements.
Depending on the circumstances, appropriate safeguards may include contractual protections, applicable legal mechanisms, consent where required, or reliance on a recipient jurisdiction that provides an adequate level of protection.
11. Information Security
iSanqa takes reasonable technical and organisational measures to protect personal information against:
-
unauthorised access;
-
accidental loss;
-
unauthorised disclosure;
-
alteration;
-
destruction; and
-
other forms of unlawful processing.
These measures include appropriate access controls, authentication practices, security procedures and controls applicable to the systems and devices used by iSanqa.
Our detailed security practices are addressed separately in the iSanqa Information Security Policy.
No method of electronic transmission or storage can be guaranteed to be completely secure. However, iSanqa will take reasonable steps to protect personal information appropriate to the nature and risk of the information being processed.
12. Data Retention
iSanqa does not retain personal information indefinitely without a legitimate reason.
Personal information will be retained only for as long as reasonably necessary for the purpose for which it was collected, or for as long as required or permitted by applicable law.
Retention periods may be influenced by:
-
the purpose for which the information was collected;
-
contractual requirements;
-
tax and financial obligations;
-
employment and labour requirements;
-
legal or regulatory obligations;
-
dispute resolution;
-
legitimate business requirements; and
-
the need to establish, exercise or defend legal claims.
When personal information is no longer required, iSanqa will take reasonable steps to securely delete, destroy or anonymise it, subject to applicable retention requirements.
13. Data Accuracy
iSanqa takes reasonable steps to ensure that personal information processed by us is accurate, complete and up to date where appropriate for the purpose for which it is used.
You may contact us if you believe that information we hold about you is inaccurate, incomplete or outdated.
14. Your Rights
Subject to the applicable requirements and limitations of POPIA and other applicable legislation, you may have rights in relation to your personal information, including the right to:
-
Request confirmation of whether we hold personal information about you
-
Request access to personal information we hold about you
-
Request correction or updating of inaccurate or incomplete information
-
Object to certain processing of your personal information
-
Object to the processing of your personal information for direct marketing purposes
-
Withdraw consent where processing is based on consent
-
Request deletion of personal information where applicable
-
Request restriction of processing in circumstances permitted by law
-
Lodge a complaint regarding the processing of your personal information
These rights are subject to applicable legal exceptions and may not apply in every circumstance.
15. Direct Marketing
Where iSanqa sends direct marketing communications, we will comply with applicable legal requirements.
You may request that we stop sending marketing communications to you.
You can also contact us directly if you wish to update your communication preferences.
16. Cookies and Website Technologies
Our website may use cookies and similar technologies to support website functionality, security, performance and analytics.
Cookies are small files stored on your device by a website.
Depending on the technologies implemented on our website, cookies may be used to:
-
Enable essential website functionality
-
Remember user preferences
-
Understand website usage
-
Monitor website performance
-
Improve website functionality
-
Support website security
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of some website features.
Where required, iSanqa will provide appropriate cookie notices or consent mechanisms.
The use of third-party analytics or other website technologies may be subject to the privacy policies of the
relevant service providers.
17. Children's Information
Our recruitment and business services are not directed at children.
We do not knowingly collect personal information from children for recruitment or employment purposes unlessthere is a lawful reason to do so and the appropriate requirements have been met.
If you believe that we have inadvertently collected personal information relating to a child without an
appropriate lawful basis, please contact us so that the matter can be assessed and appropriate action taken.
18. Third-Party Websites
Our website may contain links to websites operated by third parties.
Those websites are outside iSanqa's control and are subject to their own privacy policies and terms of use.
We recommend reviewing the privacy policy of any third-party website before providing personal information to that website.
iSanqa is not responsible for the privacy practices, security or content of third-party websites.
19. Personal Information Security Incidents
If iSanqa becomes aware of a security compromise involving personal information, we will assess the incident and take appropriate steps to contain, investigate and remediate the incident.
Where required by applicable law, affected parties and the Information Regulator will be notified in accordance with the applicable legal requirements.
The Information Regulator provides mechanisms for organisations to report personal-information security
compromises and for individuals to lodge POPIA complaints.
20. Complaints
If you have a concern about how iSanqa has processed your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.
You also have the right, where applicable, to lodge a complaint with the Information Regulator of South Africa.
The Information Regulator is responsible for monitoring and enforcing compliance with POPIA and PAIA.
Further information regarding the Information Regulator and its services is available through its official website.
21. Changes to This Privacy Policy
iSanqa may update this Privacy Policy from time to time to reflect:
-
Changes in our business operations
-
Changes to the services we provide
-
Changes to the way personal information is processed
-
Changes to technology or third-party service providers
-
Changes in applicable legislation or regulatory requirements
-
Improvements to our privacy practices
The Last Updated date at the beginning of this Privacy Policy will be amended when material changes are made.
We encourage users and other stakeholders to review this Privacy Policy periodically.
22. Contact Us
If you have any questions, requests or concerns regarding this Privacy Policy or the way iSanqa processes
personal information, please contact us:
Email: info@isanqa.co.za
Website: www.isanqa.co.za
Physical Address: 40 Murray Street, Durbanville, Cape Town, 7550
Last Updated: August 2026
