🏠1. Who We Are
BKS Community Job Center ("BKS", "we", "us", "our") is a community-operated job facilitation service based in Atok, Ga-Selepe, Limpopo (postal code 0749), South Africa. We operate this online portal to help connect local community members with employment opportunities at mines.
BKS acts as the Responsible Party as defined under the Protection of Personal Information Act, 4 of 2013 (POPIA), and is responsible for the lawful, fair, and transparent processing of your personal information.
📄2. What Information We Collect
When you register an account or submit a job application through this portal, we collect the following categories of personal information:
| Category | Information Collected | When |
|---|---|---|
| Identity | Full name, South African ID number, gender, marital status | On application submission |
| Contact | Phone number, email address | On registration & application |
| Account | Email address, password (stored as SHA-256 hash — never readable) | On account creation |
| Application Documents | Curriculum Vitae (CV/résumé), ID document scan or photograph | On application submission |
| Location | GPS coordinates (eligibility verification only — never stored) | On portal entry (optional) |
| Usage & Events | Application submission timestamps, status change history | Automatically on each event |
Information We Do Not Collect
- Banking or financial account details
- Medical or health information
- Race or ethnic origin (beyond what may appear in identity documents)
- Religious or political beliefs
- Criminal records
- Biometric data
🎯3. Why We Collect Your Information
We process your personal information for the following specific purposes only:
- To process your job application — matching your details and qualifications to available positions and sharing your application with recruitment personnel.
- To verify your eligibility — confirming that you reside within the eligible community area.
- To communicate with you — sending confirmation emails on application receipt, and status update emails when your application status changes.
- To maintain a transparent record — creating a time-stamped, auditable record of all applications accessible to the Local Committee and the mine.
- To manage your account — allowing you to sign in securely, pre-fill application forms, and track your application history.
- To comply with legal obligations — retaining records as required under applicable South African labour and community development regulations.
⚖️4. Legal Basis for Processing
Under POPIA, we are required to have a lawful basis for processing your personal information. Our legal bases are:
- Consent — You provide explicit consent by ticking the consent checkbox when submitting your application. You may withdraw consent at any time by contacting us.
- Contractual necessity — Processing is necessary to take steps at your request prior to entering into employment.
- Legitimate interest — Maintaining an accurate, accountable record of all applications, in line with the mine's Social and Labour Plan (SLP) obligations.
- Legal compliance — Retaining records as required by South African law.
🔒5. How We Store and Protect Your Information
All data is stored within Supabase's cloud infrastructure (a managed PostgreSQL database and secure file storage), which operates data centres with industry-standard security certifications.
Technical safeguards in place:
- Password hashing: All passwords are hashed using SHA-256 before storage. The original password is never stored anywhere.
- Access control: The admin portal is password-protected, verified server-side. Only authorised BKS administrators and authorised committee personnel can access it.
- Encrypted transmission: All data is transmitted over HTTPS (TLS encryption).
- Private document storage: Uploaded CVs and ID documents are stored in a private storage bucket, accessible only via time-limited secure links generated for authorised staff.
- No public exposure: No personal data is publicly accessible.
📅6. How Long We Keep Your Information
| Data Type | Retention Period | Reason |
|---|---|---|
| Job application records | 3 years from submission date | Accountability, auditing, and regulatory compliance |
| Uploaded documents (CV, ID) | 3 years from submission date | Recruitment record keeping |
| Account information | Until account deletion is requested | Ongoing access to application history |
| Application event logs | 3 years from last event | Transparency and audit trail |
| Location data (GPS) | Not retained — deleted immediately after eligibility check | Used only client-side for verification |
After the retention period, personal information will be securely deleted or anonymised so that it can no longer be linked to you.
👥7. Who We Share Your Information With
We share your information only where necessary for the purposes described in this notice:
- Mine & HR Team: Your application details are shared with the mine's authorised recruitment personnel for candidate evaluation and shortlisting.
- Local Community Committee: The committee may review the application register for governance and accountability purposes.
- Traditional Leadership: Traditional authority structures may review anonymised or summarised application data as part of their oversight role.
- Infrastructure providers (data processors): Supabase and Netlify provide the underlying cloud infrastructure. These providers process data strictly as processors under our instruction and do not use your data for their own purposes.
⚖️8. Your Rights Under POPIA
As a data subject under POPIA, 4 of 2013, you have the following rights:
Right of Access
Request a copy of the personal information we hold about you.
Right to Correction
Request correction of inaccurate, misleading, or incomplete information.
Right to Object
Object to the processing of your information in certain circumstances.
Right to Deletion
Request deletion of your information where we have no lawful reason to retain it.
Withdraw Consent
Withdraw your consent to processing at any time by contacting us.
Right to Complain
Lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact us using the details in Section 12. We will respond within 30 days.
Website: www.justice.gov.za/inforeg
Email: inforeg@justice.gov.za • Phone: 010 023 5207
🌏9. Cookies and Location Data
Session Storage
This portal uses your browser's sessionStorage (not cookies) to keep you signed in during your visit. This data is temporary — it is automatically cleared when you close your browser tab. No persistent tracking cookies are set by BKS.
Location Data
When you visit the portal, you are asked to share your device's GPS location solely to verify that you reside within the eligible Atok, Ga-Selepe, 0749 service area. The verification happens entirely within your browser — your coordinates are never sent to our servers and never stored. You may decline location access at any time.
Third-Party Services
This portal is hosted on Netlify with data stored via Supabase. Their respective privacy policies apply: netlify.com/privacy and supabase.com/privacy
👤10. Children's Privacy
This portal is intended for adults seeking employment. We do not knowingly collect personal information from persons under the age of 18. If you are under 18, please do not submit an application without the consent of a parent or legal guardian. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly.
🔄11. Changes to This Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the effective date shown at the top of this page. We encourage you to review this notice periodically. Continued use of the portal after changes are posted constitutes your acceptance of the updated notice.
📞12. How to Contact Us
If you have any questions about this Privacy Notice, wish to exercise your rights, or want to raise a concern, please contact us: