Privacy Policy

1. Introduction

Daisy CV (Pty) Ltd (“DCV”, “we”, “us”, or “our”) is committed to protecting the privacy and personal information of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our recruitment platform at daisycv.com (the “Platform”).

This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa, the General Data Protection Regulation (GDPR) of the European Union (where applicable), and other relevant data protection legislation.

By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register, create a profile, or use our services, we may collect:

• Account Information: Full name, email address, password (encrypted), phone number, and account role (Employer or Candidate).
• Candidate Profile Data: Curriculum vitae (CV), work experience, education history, professional qualifications, certifications, skills, location, salary expectations, availability, and preferred job locations.
• Employer Profile Data: Company name, industry, company size, website, company description, logo, banner image, brand colours, social media links, culture description, benefits, and technology stack.
• Identity & Verification Documents: Identity documents, criminal check results, qualification certificates, professional references, medical fitness certificates, and visa/travel documents uploaded for verification purposes.
• Communication Data: Messages sent through our internal messaging system, contact form submissions, and correspondence with our support team.
• Payment Information: Transaction records, payment references, and billing details processed through our payment gateway (PayFast). We do not store credit card or bank account numbers directly.

2.2 Information Collected Automatically

When you access our Platform, we automatically collect:

• Device & Browser Information: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage Data: Pages visited, time spent on pages, click patterns, search queries, and navigation paths.
• Cookies & Similar Technologies: Session identifiers, authentication tokens, and preference settings. See our Cookie Policy for full details.
• Audit Data: Login timestamps, actions performed on the Platform (for security and compliance purposes).

2.3 Information from Third Parties

• Single Sign-On Providers: If you sign in via Google or LinkedIn, we receive your name, email address, and profile picture from those services.
• Background Check Providers: Verification results from identity, criminal, financial, and employment checks conducted by authorised third-party providers.
• Professional References: Feedback from referees you have nominated as part of the vetting process.

3. How We Use Your Information

We process your personal information for the following purposes:

• Recruitment Services: Matching candidates with job opportunities, facilitating applications, managing the vetting and shortlisting process, and coordinating placements.
• Account Management: Creating and maintaining your account, authenticating your identity, and providing customer support.
• Verification & Compliance: Conducting background checks, verifying identity documents, qualifications, and employment history as part of our managed recruitment process.
• Communication: Sending job alerts, application status updates, platform notifications, and responding to your enquiries.
• Payment Processing: Processing employer payments for job postings and placement fees through our secure payment gateway.
• Platform Improvement: Analysing usage patterns to improve our services, fix issues, and develop new features.
• AI-Powered Matching: Using artificial intelligence to analyse candidate profiles against job requirements and generate compatibility scores and recommendations.
• Legal Compliance: Complying with applicable laws, regulations, and legal processes, including POPIA, GDPR, and South African employment legislation.
• Security & Fraud Prevention: Detecting, preventing, and responding to security incidents, fraud, and misuse of the Platform.

4. Legal Basis for Processing

Under POPIA and GDPR, we process your personal information based on one or more of the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications, AI-powered CV parsing).
• Contractual Necessity: Where processing is necessary to fulfil our contractual obligations to you as a user of the Platform.
• Legitimate Interest: Where processing is necessary for our legitimate business interests (e.g., improving our services, ensuring platform security), provided these do not override your rights.
• Legal Obligation: Where processing is required to comply with applicable laws and regulations.

5. Sharing of Information

We may share your personal information with the following categories of recipients:

• Employers (for Candidates): When you are shortlisted for a position, relevant profile information is shared with the prospective employer. This includes your name, skills, experience, qualifications, and assessment results. Full CVs are only shared upon shortlisting.
• Candidates (for Employers): Your company profile information is visible to candidates browsing job listings on the Platform.
• Verification Partners: Identity verification, criminal check, and qualification verification service providers who assist in the vetting process.
• Payment Processors: PayFast (Pty) Ltd processes payment transactions on our behalf. Your payment data is subject to PayFast’s Privacy Policy.
• Cloud Service Providers: We use secure cloud infrastructure to host the Platform and store data. All data is encrypted in transit and at rest.
• Legal Authorities: Where required by law, court order, or government regulation, or to protect our rights, safety, or property.
• Professional Advisors: Lawyers, auditors, and consultants who are bound by professional confidentiality obligations.

We do not sell your personal information to third parties. We do not share your data with advertisers or data brokers.

6. International Data Transfers

As a recruitment platform with international reach, your personal information may be transferred to and processed in countries outside South Africa, including countries within the European Economic Area (EEA) and other jurisdictions.

Where we transfer personal information internationally, we ensure appropriate safeguards are in place, including:

• Contractual clauses that ensure the recipient provides adequate protection for your data.
• Transfers to countries that have been recognised as providing adequate levels of data protection.
• Your explicit consent, where applicable.

7. Data Retention

We retain your personal information for as long as:

• Your account is active on the Platform.
• Necessary to provide our services to you.
• Required to comply with legal obligations (e.g., tax and employment records).
• Needed to resolve disputes and enforce our agreements.

Candidate profiles and associated data are retained for a maximum of 3 years after the last account activity, after which they are anonymised or deleted. Employer data is retained for the duration of the business relationship plus 5 years for legal and financial record-keeping purposes.

You may request deletion of your data at any time (see Section 8 below).

8. Your Rights

Under POPIA and GDPR, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Right to Restriction: Request restriction of processing in certain circumstances.
• Right to Data Portability: Receive your personal information in a structured, commonly used, machine-readable format. Candidates can use the “Export My Data” feature on their Profile page.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: Lodge a complaint with the Information Regulator of South Africa or relevant supervisory authority.

To exercise any of these rights, contact us at [email protected] or use the self-service data export feature available in your account settings.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure password hashing using industry-standard algorithms (bcrypt).
• Role-based access controls limiting data access to authorised personnel.
• Regular security assessments and vulnerability monitoring.
• Audit logging of all significant platform actions.
• Secure cloud storage with access controls and monitoring.
• Two-factor authentication support for account access.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach in accordance with POPIA and GDPR requirements.

10. Children’s Privacy

Our Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete the information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on the Platform and, where appropriate, by email notification. The “Last updated” date at the top of this page indicates when the policy was last revised.

12. Information Officer

In accordance with POPIA, DCV has appointed an Information Officer responsible for ensuring compliance with data protection legislation. For any privacy-related enquiries, requests, or complaints, please contact:

You also have the right to lodge a complaint with the Information Regulator of South Africa: