Privacy Policy

Hanani Project Management Solutions (Pty) Ltd ("hanani", "we", "us", "our") is a South African company registered under number 2007/030396/07, with its principal place of business at 17 Beau Art Crescent, Mooikloof Estates, Mooikloof, Pretoria, Gauteng, 0081. We operate the hanani platform at hanani.co.za — a talent acquisition and HR services platform connecting employers with job seekers across South Africa and beyond. For all privacy-related enquiries, contact us at [email protected].

This Privacy Policy applies to all personal information collected, processed, stored, or shared by hanani through: • The hanani.co.za website and web application • Our employer and job seeker portals • Email, telephone, and other direct communications • Third-party integrations (PayFast, Zoom, Google, DHA Verification) By using our platform you confirm that you have read and understood this policy. If you do not agree, please discontinue use of our services.

We collect personal information in the following categories: Job Seekers: Full name, identity number (SA ID or passport), date of birth, nationality, contact details (email, phone, physical address), profile photograph, employment history, qualifications, driver's licence details, and documents uploaded for background checks or verification. Employers: Company name, registration number, VAT number, contact person details, billing information, and job posting content. All Users: IP address, browser type, device identifiers, session data, cookies, and usage analytics. We collect this information directly from you when you register, complete your profile, submit forms, or interact with our services.

We process your personal information for the following purposes: • Providing and operating the hanani platform and its features • Matching job seekers with suitable employment opportunities • Facilitating background checks, FICA verification, and DHA identity verification • Processing payments via PayFast • Scheduling interviews via Zoom, Microsoft Teams, or Google Meet • Sending transactional emails and service notifications • Complying with legal and regulatory obligations (including POPIA, SARS, and UIF requirements) • Improving our platform through anonymised analytics • Responding to enquiries and support requests We do not use your personal information for unsolicited marketing without your explicit consent.

We process personal information on the following lawful grounds under POPIA: • Contractual necessity — to fulfil our obligations to you as a user of our platform • Legal obligation — to comply with South African law (POPIA, SARS, UIF, FICA) • Legitimate interest — to operate, secure, and improve our platform • Consent — where you have explicitly opted in (e.g., marketing communications, POPIA consent at registration) You may withdraw consent at any time by contacting us at [email protected], subject to any overriding legal obligations.

We share personal information only where necessary: Service Providers: PayFast (payment processing), Zoom (interview scheduling), Google (Maps, Meet), DHA Verification API, and our hosting infrastructure. All providers are contractually bound to process data only as instructed. Background Check Partners: When you or your employer initiates a background check, relevant personal information is shared with our accredited verification partners. Legal Requirements: We may disclose information to law enforcement, regulatory authorities, or courts where required by law. We do not sell personal information to third parties.

We retain personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law: • Active accounts: retained for the duration of the account • Closed accounts: retained for 5 years after closure for legal and audit purposes • Background check records: retained for 3 years • Payment records: retained for 7 years (SARS requirement) After the applicable retention period, data is securely deleted or anonymised.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These include: • Encrypted data transmission (HTTPS/TLS) • Hashed password storage (bcrypt) • Role-based access controls • Regular security reviews No method of transmission over the internet is 100% secure. If you suspect a security breach affecting your account, contact us immediately at [email protected].

As a data subject under the Protection of Personal Information Act 4 of 2013 (POPIA), you have the right to: • Access the personal information we hold about you • Request correction of inaccurate or incomplete information • Request deletion of your information (subject to legal retention obligations) • Object to the processing of your information • Lodge a complaint with the Information Regulator of South Africa To exercise any of these rights, email [email protected] with the subject line "POPIA Data Request". We will respond within 30 days. Information Regulator contact: [email protected]

We use cookies and similar tracking technologies to operate and improve our platform. Please refer to our Cookie Policy for full details on the types of cookies we use, their purpose, and how to manage your preferences.

Our platform is not intended for persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately at [email protected].

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are material, notify registered users by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

For any questions, concerns, or requests relating to this Privacy Policy: Email: [email protected] Phone: +27 (0)12 996 1932 Post: 17 Beau Art Crescent, Mooikloof Estates, Mooikloof, Pretoria, Gauteng, 0081