Privacy Policy

Last updated: 31 August 2025

This Privacy Policy explains how we collect, use, and protect your personal information when you use the iThuba platform (“the Service”). We are committed to complying with the Protection of Personal Information Act, 2013 (“POPIA”).

1. What Information We Collect

When you use our platform, we may collect and store the following types of personal information:

• Full name
• Email address
• Password (securely encrypted)
• CV content (education, work experience, skills, etc.)
• Uploaded files (e.g., CVs, certificates)
• Account activity (login times, updates)

2. How We Use Your Information

We use your personal information to:

• Create and manage your account
• Enable you to build, store, and update your CV
• Communicate with you about platform updates or policy changes
• Improve and maintain the performance of the platform
• Comply with legal and regulatory obligations

Your unique QR code contains a secure personal link to your public iThuba rating page. Scanning it will allow others to open your profile and leave a rating/scoring.

3. Your Consent

By registering an account and using our Service, you consent to the collection and processing of your personal information as outlined in this policy.

You may withdraw your consent at any time by deleting your account or contacting us directly.

4. Data Security

We use reasonable and appropriate technical and organisational safeguards to protect your data from loss, theft, and unauthorised access. These include:

• Encrypted connections (HTTPS)
• Secure password storage
• Access controls and user authentication
• Regular system audits

5. Sharing of Information

We do not sell or share your personal data with third parties for marketing purposes. We may share your data with:

• Trusted third-party service providers (e.g., cloud hosting) who are POPIA-compliant
• Law enforcement or regulatory bodies, if required by law

6. Cross-Border Transfers

Your data may be stored on servers located outside South Africa (e.g., Europe or the USA). We ensure that any cross-border data transfers comply with POPIA by using approved contractual safeguards and providers with adequate protection policies.

7. Data Retention

We retain your personal data only for as long as necessary to provide the Service, comply with legal obligations, or until you delete your account. After deletion, your data will be securely removed from our systems within a reasonable time frame.

8. Your Rights Under POPIA

You have the right to:

• Access the personal information we hold about you
• Request correction or deletion of your data
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

9. Cookies & Analytics

We may use limited cookies or third-party tools to understand how users interact with the platform. This information is used to improve functionality and is anonymised where possible. No tracking for advertising purposes is currently used.

10. Changes to This Policy

We may update this Privacy Policy from time to time. You will be notified of any material changes via email or in-platform notifications.

11. Contact Us

If you have any questions about this policy or how we handle your information, please contact:

iThuba Support
Email: support@ithuba-za.com