Legal
Candidate Privacy Notice
This notice explains how TALENTTAC collects, uses, and protects the personal information of job applicants and candidates in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
Last updated: October 2026
1. Who This Notice Applies To
This Candidate Privacy Notice applies to all individuals who apply for roles advertised by TALENTTAC, submit their CV or personal information to TALENTTAC for consideration for current or future vacancies, or are identified by TALENTTAC as potential candidates through professional networks, referrals, or other sourcing methods. It supplements our general Privacy Notice & POPIA Policy and should be read alongside it.
2. The Personal Information We Collect
In the course of our recruitment activities, we may collect the following categories of personal information about you: identity information (full name, date of birth, identity number or passport number, nationality); contact details (email address, telephone number, physical address); professional information (CV, employment history, job titles, responsibilities, achievements, qualifications, certifications, professional memberships); references (names and contact details of referees, and information provided by referees about you); assessment and interview data (notes from interviews, assessment results, skills evaluations); compensation information (current and expected salary, benefits); right to work information (work permit or visa status where applicable); and any other information you voluntarily provide to us during the recruitment process.
3. Special Personal Information
POPIA places additional restrictions on the processing of special personal information, which includes information about race, health, criminal history, and similar sensitive categories. We will only process special personal information about you where it is necessary for a specific recruitment purpose, where you have given explicit consent, or where we are required to do so by law. We will inform you separately if we need to process any special personal information.
4. How We Collect Your Information
We collect your personal information directly from you when you apply for a vacancy, submit your CV, complete an application form, or correspond with us. We may also receive your information from third parties, including: referees you have nominated; professional networking platforms such as LinkedIn; client organisations who refer candidates to us; and other recruitment agencies where permitted.
5. Why We Process Your Information
We process your personal information for the following recruitment-related purposes: to assess your suitability for specific vacancies; to match your profile with current and future opportunities; to conduct background and reference checks (with your consent); to communicate with you about your application and the recruitment process; to comply with our legal obligations; and to maintain records of our recruitment activities. We will not use your information for any purpose incompatible with recruitment without your consent.
6. Sharing Your Information with Clients
As a recruitment consultancy, a core part of our service involves presenting suitable candidates to our client organisations. We will only share your personal information with a client where: we have informed you of the specific opportunity and you have agreed to be put forward; or you have given us general consent to present your profile to relevant clients. We will not share your information with clients without your knowledge. Clients are required to treat your information confidentially and in accordance with applicable data protection laws.
7. Other Third Parties
We may also share your personal information with: background screening providers (with your consent); psychometric or skills assessment providers (with your consent); our IT and cloud service providers under appropriate data-processing agreements; and professional advisers and regulatory authorities where required by law. We do not sell candidate personal information.
8. Retention of Candidate Records
If you are placed in a role through TALENTTAC, we will retain your records for the duration of the placement and for a period of five years thereafter for legal and contractual purposes. If you are not placed, we will retain your records for a period of three years from the date of last contact, so that we can consider you for future opportunities. After the applicable retention period, your records will be securely deleted or anonymised. You may request earlier deletion — see Section 10 below.
9. Keeping Your Information Up to Date
It is important that the personal information we hold about you is accurate and current. Please notify us if your personal information changes during your relationship with us by contacting [email protected].
10. Your Rights as a Candidate
Under POPIA you have the right to: request access to the personal information we hold about you; request correction of inaccurate or incomplete information; request deletion of your information (subject to our legal obligations); object to the processing of your information on reasonable grounds; withdraw consent at any time where processing is based on consent (this will not affect the lawfulness of processing before withdrawal); and lodge a complaint with the Information Regulator of South Africa. To exercise any of these rights, please contact our Information Officer at [email protected]. We will respond within a reasonable time and in accordance with POPIA.
11. Security
We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or loss. Access to candidate records is restricted to authorised TALENTTAC personnel on a need-to-know basis.
12. Contact and Complaints
If you have any questions about this Candidate Privacy Notice or how we handle your personal information, please contact our Information Officer: Bronwyn Groenewald, TALENTTAC (Pty) Ltd, Email: [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. Email: [email protected]. Website: www.inforegulator.org.za.