🏠1. Who We Are
BKS Community Job Center ("BKS", "we", "us", "our") is a community-operated job facilitation service based in Atok, Ga-Selepe, Limpopo (postal code 0749), South Africa. We operate this online portal to help connect local community members with employment opportunities at mines.
BKS acts as the Responsible Party as defined under the Protection of Personal Information Act, 4 of 2013 (POPIA), and is responsible for the lawful, fair, and transparent processing of your personal information.
Information Officer: Brian Kagiso Sekgobela, the founder of BKS, is our Information Officer, registered with the Information Regulator of South Africa on 14 May 2026 (registration number 2026-015573). He is responsible for POPIA compliance and for handling your requests. His contact details are in Section 12.
📄2. What Information We Collect
When you register an account or submit a job application through this portal, we collect the following categories of personal information:
| Category | Information Collected | When |
|---|---|---|
| Identity | Full name, South African ID number, gender, marital status | On application submission |
| Contact | Phone number, email address | On registration & application |
| Account | Email address, password (stored only as a bcrypt hash — never readable) | On account creation |
| Application Documents | Curriculum Vitae (CV/résumé), ID document scan or photograph | On application submission |
| Location | GPS coordinates (eligibility verification only — never stored) | On portal entry (optional) |
| Usage & Events | Application submission timestamps, status change history | Automatically on each event |
| Consent record | The date and time you gave consent and the version of this notice that applied | On application submission |
Information We Do Not Collect
- Banking or financial account details
- Medical or health information
- Race or ethnic origin (beyond what may appear in identity documents)
- Religious or political beliefs
- Criminal records
- Biometric data
🎯3. Why We Collect Your Information
We process your personal information for the following specific purposes only:
- To process your job application — matching your details and qualifications to available positions and sharing your application with recruitment personnel.
- To verify your eligibility — confirming that you reside within the eligible community area.
- To keep you informed — your application status is shown under My Applications when you are signed in. We do not currently send emails about applications. If we add email notifications, we will update this notice first and use only the email address you gave us.
- To maintain a transparent record — creating a time-stamped, auditable record of all applications accessible to the Local Committee and the mine.
- To manage your account — allowing you to sign in securely, pre-fill application forms, and track your application history.
- To comply with legal obligations — retaining records as required under applicable South African labour and community development regulations.
⚖️4. Legal Basis for Processing
Under POPIA, we are required to have a lawful basis for processing your personal information. Our legal bases are:
- Consent — You provide explicit consent by ticking the consent checkbox when submitting your application. We record the date, time and notice version when you consent. You may withdraw consent at any time by contacting us.
- Contractual necessity — Processing is necessary to take steps at your request prior to entering into employment.
- Legitimate interest — Maintaining an accurate, accountable record of all applications, in line with the mine's Social and Labour Plan (SLP) obligations.
- Legal compliance — Retaining records as required by South African law.
🔒5. How We Store and Protect Your Information
All data is stored within Supabase's cloud infrastructure (a managed PostgreSQL database and secure file storage), which operates data centres with industry-standard security certifications.
Technical safeguards in place:
- Password hashing: All passwords are hashed with bcrypt before storage. The original password is never stored anywhere.
- Access control: The admin portal is password-protected, verified server-side. Only authorised BKS administrators and authorised committee personnel can access it.
- Encrypted transmission: All data is transmitted over HTTPS (TLS encryption).
- Private document storage: Uploaded CVs and ID documents are stored in a private storage bucket, accessible only via time-limited secure links generated for authorised staff.
- No public exposure: No personal data is publicly accessible.
- Sign-in protection: Repeated failed sign-in attempts are temporarily blocked, and you can only view your own applications.
Where your information is processed
Our cloud providers may store or process information on servers outside South Africa. Where this happens, we rely on providers whose data processing terms require protection comparable to POPIA, as section 72 of POPIA requires.
If something goes wrong
If your personal information is accessed by an unauthorised person, we will notify the Information Regulator and the people affected as soon as reasonably possible, as section 22 of POPIA requires.
📅6. How Long We Keep Your Information
| Data Type | Retention Period | Reason |
|---|---|---|
| Job application records | 3 years from submission date | Accountability, auditing, and regulatory compliance |
| Uploaded documents (CV, ID) | 3 years from submission date | Recruitment record keeping |
| Account information | Until account deletion is requested | Ongoing access to application history |
| Application event logs | 3 years from last event | Transparency and audit trail |
| Location data (GPS) | Not retained — deleted immediately after eligibility check | Used only client-side for verification |
We review stored records at least every six months and securely delete anything past its retention period. If you ask us to delete your information earlier, we will do so within 30 days unless the law requires us to keep it.
👥7. Who We Share Your Information With
No mine, committee or traditional authority currently receives applicant information through this portal. If that changes, we will update this notice before any sharing begins, and we will share information only with partners who agree in writing to handle it in line with POPIA. The parties below are those that may receive it once the portal is operating:
- Mine & HR Team: Your application details are shared with the mine's authorised recruitment personnel for candidate evaluation and shortlisting.
- Local Community Committee: The committee may review the application register for governance and accountability purposes.
- Traditional Leadership: Traditional authority structures may review anonymised or summarised application data as part of their oversight role.
- Infrastructure providers (data processors): Supabase and Netlify provide the underlying cloud infrastructure. These providers process data strictly as processors under our instruction and do not use your data for their own purposes.
⚖️8. Your Rights Under POPIA
As a data subject under POPIA, 4 of 2013, you have the following rights:
Right of Access
Request a copy of the personal information we hold about you.
Right to Correction
Request correction of inaccurate, misleading, or incomplete information.
Right to Object
Object to the processing of your information in certain circumstances.
Right to Deletion
Request deletion of your information where we have no lawful reason to retain it.
Withdraw Consent
Withdraw your consent to processing at any time by contacting us.
Right to Complain
Lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact us using the details in Section 12. We will respond within 30 days.
Website: inforegulator.org.za
Complaints: POPIAComplaints@inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za • 010 023 5200 • Toll free 0800 017 160
🌏9. Cookies and Location Data
Session Storage
This portal uses your browser's sessionStorage (not cookies) to keep you signed in during your visit. This data is temporary — it is automatically cleared when you close your browser tab. No persistent tracking cookies are set by BKS.
Location Data
When you visit the portal, you are asked to share your device's GPS location solely to verify that you reside within the eligible Atok, Ga-Selepe, 0749 service area. The verification happens entirely within your browser — your coordinates are never sent to our servers and never stored. You may decline location access at any time.
Third-Party Services
This portal is hosted on Netlify with data stored via Supabase. Their respective privacy policies apply: netlify.com/privacy and supabase.com/privacy
👤10. Children's Privacy
This portal is intended for adults seeking employment. We do not knowingly collect personal information from persons under the age of 18. If you are under 18, please do not submit an application without the consent of a parent or legal guardian. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly.
🔄11. Changes to This Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the effective date shown at the top of this page. We encourage you to review this notice periodically. Continued use of the portal after changes are posted constitutes your acceptance of the updated notice.
📞12. How to Contact Us
If you have any questions about this Privacy Notice, wish to exercise your rights, or want to raise a concern, please contact us: