Legal

    Privacy Policy

    Last updated: 7 July 2026

    Section 1 — Our privacy obligations

    The definitions used in the Website Terms and Conditions shall apply mutatis mutandis in this Privacy Policy.

    Jobox has created this privacy policy in order to demonstrate Our firm commitment to the right to privacy. The following discloses the processing practices pertaining to information on the Jobox Website.

    By using the Website and accepting the Terms and Conditions, You also agree to this Privacy Policy. If You do not agree to this Privacy Policy, You may not use the Website. The terms “We,” “Us,” “Our,” or “Jobox” includes Jobox (Pty) Ltd and Our affiliates.

    It is not mandatory for you to provide Us with your Personal Information in order to access the Website. However, you may not be able to access or use the full functionalities of the Website if you do not share your Personal Information.

    Jobox's Privacy Policy applies to Personal Information processed by Jobox. 'Personal information' means any personal details which you (as a natural person or juristic entity) provide in any way through the use of this Website, in any form whatsoever, capable of identifying You which includes but is not limited to your names, postal and physical addresses, contact numbers, e-mail address, opinions, preferences, name of your University and any other type of personal information as defined in the Data Protection Laws, each of which forms a separate data tag of information on the Website.

    We will review this Privacy Policy regularly, and We may update same on the Website, from time to time, at our sole discretion.

    Section 2 — The types of personal information we collect and hold

    We collect Personal Information about Our Users in order to provide Our Services, and customer support. Our Services and customer support are provided through many platforms including but not limited to: websites, phone apps, email, and telephone. The specific platform for Services and customer support You interact with may affect the Personal Information We process.

    Not all information requested, collected, and processed by Us constitutes "Personal Information", especially if the information is incapable of identifying a specific person, falls under the Data Protection Laws exceptions to processing or is for historic and statistic purposes (“Non-Personal Information”). This will include the majority of "User Generated Content" that You provide Us with the intention of sharing with other Users. Such Non-Personal Information is not covered by this Privacy Policy. However, as Non-Personal Information may be used in aggregate or be linked with existing Personal Information; when in this form it will be treated as Personal Information. As such, this Privacy Policy will list both types of information for the sake of transparency.

    In some situations, Users may provide Us with Personal Information without Us asking for it, or through means not intended for its purpose. Whilst We may take reasonable steps to protect this data, the User will have bypassed Our systems, processes, and controls and thus the Personal Information provided will not be governed by this Privacy Policy.

    In some situations, Users may provide Us with Personal Information over platforms that are outside of Our control; for example through Affiliates, social media platforms or forums. Whilst any Personal Information processed by Us is governed by this Privacy Policy, the platform or forum by which it was communicated will be governed by its own Privacy Policy.

    In some situations Users may provide Us with Personal Information of third parties. Whilst We remain liable for lawful processing of the third parties' Personal Information, the User must take steps to inform the third party that the User intends to disclose their details to Us and inform such third parties that the processing of their Personal Information will be in accordance with this Policy.

    Section 3 — How we collect personal information

    Information that you specifically give us

    While You use Our Services You may be asked to provide Personal Information. This might happen through Our Website, applications, online chat systems, Fixed Term Contracts, telephone, paper forms, or in-person meetings. We will explain how We will use the Personal Information We are asking for, if outside the scope of this Privacy Policy prior to obtain your informed consent to process the Personal Information.

    In general, We may request, collect, or process the following information:

    • Account Details — username, password, profile picture.
    • Contact Details — email address, phone number.
    • Location Details — physical address, billing address, timezone.
    • Identity Details — full name, proof of identity (e.g. drivers licence, passport), proof of address (e.g. utility bill), a photograph of the user.
    • Financial Information — credit card details, wire transfer details, payment processor details (e.g. Skrill, PayPal), tax numbers.
    • User Generated Content — user profiles, user reviews, user messages etc.
    • Criminal record information — information relating to criminal behaviour or alleged criminal behaviour (including criminal record checks/background screening results), where required for onboarding, trust and safety, compliance, or to facilitate Services, and only where permitted under applicable Data Protection Laws (including POPIA) and, where required, with your explicit consent.
    • Verification and qualification information — information and results relating to identity verification and qualification/training verification (including verification provider results and confirmations received from relevant authorities, such as SETA), where relevant to onboarding, trust and safety, compliance, or to facilitate the Services.

    Information that we collect from others

    Users can provide informed consent, by clicking the pop up consent block in order for Us to connect to specific User accounts on other platforms to process Personal Information. This includes but is not limited to Facebook, LinkedIn, Instagram, and Google. Personal Information from other platforms will be processed according to this Privacy Policy and will be governed by this Privacy Policy. Users can stop Us from processing Personal Information from other platforms by removing Our access on the other platform or by contacting Our support team.

    Users have the ability to invite non-Users to Our website by providing contact details such as email addresses. In these situations, the Personal Information will be collected and stored by Us to contact the non-user once and obtain the non-user's informed consent in terms of the Data Protection Laws prior to the continued processing of the Personal Information in order to prevent abuse of the invite systems.

    Your payment provider may transmit information about the payment that We may collect or process.

    In some situations, Personal Information of Users may be collected from public sources and We may combine and process that with the information with your Personal Information that We have collected or received about you in in other ways.

    We may collect or process the following information:

    • Basic Details — username, profile picture.
    • Contact Details — email address, phone number.
    • Location Details — physical address, billing address, timezone.
    • Financial Information — payment account details (e.g. PayPal email address and physical address), and wire transfer details.
    • List of contacts — email provider address book.
    • User-Generated Content — user profile.

    Information we collect as you use our service

    We maintain records of the interactions We have with Our Users, including the Services, customer support and feedback provided. This includes cookies that track the interactions Our Users have with Our Website such as when a User has viewed a page or clicked a button.

    In order to deliver certain Services, We may process your GPS coordinates, where available from your device used to sign into your Account. Most modern devices such as smartphones will display a permission request when Our Website requests this Personal Information.

    When We are contacted by You, We may process Personal Information that is intrinsic to the communication. For example, if We are contacted via email, We will process the email address provided.

    We may process the following information:

    • Metadata — IP address, computer and connection information, referring web page, standard web log information, language settings, timezone, etc.
    • Device Information — device identifier, device type, device plugins, hardware capabilities, etc.
    • Location — GPS position.
    • Actions — pages viewed, buttons clicked, time spent viewing, search keywords, etc.

    Links to other sites

    On Our Website, You will encounter links to third-party websites. These links may be from Us or may appear as content generated by other Users. These linked sites are not under Our control and thus We are not responsible for any actions by the third parties. Before providing your information via any other website, We advise You to examine the terms and conditions of using that website and its privacy policy.

    Section 4 — How we use personal information

    The Personal Information We process is primarily used to provide Users with the Services requested. More specifically, We may use your Personal Information for the following purposes:

    • to provide the Service You have requested;
    • to provide technical or other support to You;
    • to answer enquiries about Our Services, or to respond to a complaint;
    • to promote Our other programs, products or services which may be of interest to You (unless You have opted out from such communications);
    • to allow for debugging, testing and otherwise operate Our platforms;
    • to conduct data analysis, research and otherwise build and improve Our platforms;
    • to comply with legal and regulatory obligations;
    • if otherwise permitted or required by law;
    • for other purposes with your consent, unless You withdraw your consent for these purposes; or
    • to conduct criminal background checks/screening (which may include processing criminal record information, being special personal information under POPIA) for onboarding, trust and safety, fraud prevention, compliance, and/or to facilitate the Services, where permitted by law and, where required, with your explicit consent.

    The 'lawful processing' grounds on which We will use Personal Information about Our Users include but are not limited to:

    • when a User has given consent;
    • when necessary for the performance of a contract to which the user is party;
    • processing is necessary for compliance with Our legal obligations;
    • processing is necessary in order to protect the vital interests of Our Users or of another natural person;
    • processing is done in pursuing Our legitimate interests, where these interests do not infringe on the rights of Our Users.

    Where We process special personal information (including criminal record information), We will only do so to the extent permitted by applicable Data Protection Laws (including POPIA), including where you have provided explicit consent (where required), where the processing is necessary for the establishment, exercise or defence of a right or obligation in law, or where otherwise authorised by law, and We will apply appropriate safeguards and limit access on a need-to-know basis.

    Background checks and AI-assisted document screening

    Jobox may, where relevant to the Services and to the extent permitted by applicable Data Protection Laws, conduct and/or procure criminal background checks and other screening and verification checks in respect of Users (including Students and/or Clients), including identity verification checks and qualification verification checks (for example, cross-checks with relevant sector education and training authorities such as SETA), conducted directly or via our third-party verification providers. This may involve collecting, receiving, verifying and sharing Personal Information with third-party screening, identity verification and data service providers, competent authorities and/or other third parties, to the extent reasonably required to perform such checks and to manage trust and safety, fraud prevention, compliance and platform integrity risks, and/or to facilitate the Services.

    Jobox may also use automated tools (including artificial intelligence and machine learning) to assist with the screening, extraction, categorisation and review of documents and information submitted by Users for purposes such as identity verification, qualification checks (including checks to validate qualifications or training credentials, which may include SETA cross-checks), fraud detection, risk scoring and compliance screening (“AI-Assisted Screening”). Jobox will not make decisions that produce legal effects concerning you or similarly significantly affect you solely by automated means; such decisions will be subject to meaningful human review and oversight, subject to any lawful exceptions under applicable Data Protection Laws.

    Section 5 — When we disclose personal information

    Our third-party service providers

    The Personal Information of Users may be held or processed on Our behalf outside South Africa, including “in the cloud”, by Our third-party service providers. Where Personal Information is transferred outside South Africa, We will do so in accordance with applicable Data Protection Laws and will implement appropriate safeguards. These safeguards may include written agreements with Our third-party service providers that restrict how they may process Personal Information, require appropriate security measures, and, where applicable, standard contractual clauses or equivalent contractual safeguards for cross-border transfers.

    Our third-party service providers include:

    • Cloud hosting, storage, networking and related providers
    • SMS providers
    • Payment and banking providers
    • Marketing and analytics providers
    • Security providers
    • Background screening and identity verification providers (including criminal background check service providers, where applicable)

    Third-party applications

    Through the Jobox API it is possible for Users to grant third-party applications access to their Jobox account. Depending on the permissions that are granted, these applications may be able to access some Personal Information or do actions on the Users' behalf. These third-party applications are not controlled by Us and will be governed by their own privacy policy. Users are able to remove third-party applications from accessing the Personal Information through the settings function in the Users Account.

    Other disclosures and transfers

    We may also disclose your Personal Information to third parties for the following purposes:

    • if necessary, to provide the service or product You have requested;
    • We receive court orders, subpoenas or other requests for information by law enforcement;
    • if otherwise permitted or required by law; or
    • for other purposes with your consent.

    Section 6 — Accessing, correcting, or downloading your personal information

    You have the right to request access to the Personal Information Jobox holds about You. Unless an exception applies, We are required to provide the Personal Information We hold about You, within a reasonable time period, and without unreasonable expense or at no charge. Certain Personal Information can be accessed by logging into your Account. If You wish to access Personal Information that is not accessible through the Website or intend to download all Personal Information We hold on You in a portable data format, please contact Us. If you would like to obtain a copy of your Personal Information held by Us, please review Our Promotion of Access to Information Act, 2000 (PAIA) Manual which can be found at https://joinjobox.com/paia-manual/. Fees to obtain a copy or a description of Personal Information held about you are prescribed in terms of PAIA.

    You have the right to request the correction and/or deletion of the Personal Information We hold about You. All your Personal Information can be updated through the User settings function in the Account. If You require assistance please contact Our customer support.

    Section 7 — Exercising your other rights

    You have a number of other rights in relation to the Personal Information, however, there may be restrictions on how You may exercise these rights. This is largely due to the nature of the Services We provide. Certain Personal Information is processed in order to facilitate Fixed Terms Contracts and the Job between Users, facilitate the payments, and provide protection for the legitimate Users in Our marketplace and You have the right to:

    • seek human review of automated decision-making or profiling, and where automated decision-making is used, have a human review and confirm the decision before it is finalised (subject to any lawful exceptions);
    • opt-out of direct marketing, and profiling for marketing;
    • deletion and erasure;
    • temporary restriction of the processing.

    Human review of automated decision making / profiling

    We may use automated systems (including profiling and scoring) as part of the Services, for example to help match Users, support trust and safety, prevent fraud, and support compliance checks. Where such tools are used, they are designed to support (and not replace) human decision-making.

    Where a decision about you produces legal effects concerning you or similarly significantly affects you, Jobox will not make that decision solely by automated means. Instead, the decision will be subject to meaningful human review and oversight, and you may request to:

    • make representations about the decision (including providing additional information or context);
    • request human intervention / reconsideration; and
    • receive sufficient information about the main factors and logic involved in the decision-making (for example, the key inputs considered, how they are generally assessed, and the reason the decision was reached), subject to appropriate safeguards for security, fraud prevention, and protection of Jobox's confidential or proprietary information and the rights of other Users.

    If you choose not to provide information required for screening, verification, or marketplace integrity purposes, or you object to certain processing, you may be unable to access or use some or all features of the Services.

    Direct marketing and profiling

    Users can control what emails they receive through their settings page.

    Deletion and erasure

    Certain Personal Information and user-generated content cannot be deleted as the Personal Information is used to support contracts between Users, document financial transactions, and are used in protecting other legitimate Users of the marketplace. In the case of non-personal data that can be linked with personal data, it will either be erased or otherwise anonymised from the personal data.

    Temporary restriction to processing

    Under certain circumstances You may exercise this right, in particular, if You believe that the personal data We have is not accurate, or You believe that We do not have legitimate grounds for processing your information. In either case, You may exercise this right by contacting Our privacy officer.

    Unless stated above, Users may exercise any of the above rights by contacting Us.

    Section 8 — Retention of your personal information

    We retain Personal Information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy (including providing the Services, maintaining platform integrity and trust and safety, processing payments, and complying with legal and regulatory obligations), unless a longer retention period is required or permitted by law.

    In determining retention periods, we take into account the nature of the Personal Information, the purposes for which it was collected and processed, any legal or regulatory retention requirements, limitation periods for potential claims, and the need to establish, exercise or defend legal rights. Retention periods may therefore vary by category of Personal Information and purpose, for example: account and profile information is generally retained for the duration of your account and for a reasonable period thereafter; records relating to transactions, payments and tax are retained for the period required by applicable law; trust and safety, fraud prevention and compliance records (including verification and screening records) are retained for as long as reasonably necessary to investigate and prevent misuse and to comply with legal obligations; and communications and support records are retained for as long as reasonably necessary for customer support, training, quality assurance and dispute management.

    Where you request deletion, or where we no longer need Personal Information for the purposes for which it was collected, we will delete or irreversibly anonymise it, unless we are required or permitted to retain it (for example, to comply with legal obligations, respond to complaints, or for legal proceedings). We may also retain certain information in a restricted-access form where necessary for the establishment, exercise or defence of legal rights.

    More information about our retention periods can be requested from our privacy officer.

    Section 9 — Security of your personal information

    The security of your Personal Information is important to Us. While We strive to use commercially acceptable means to protect your Personal Information, We cannot guarantee its absolute security. However, We do employ a number of safeguards intended to mitigate the risk of unauthorized access or disclosure of your information. We will do our best to protect your Personal Information and We will use up to date technology that will help us to do this. We will at all times comply with our obligation under Data Protection Laws.

    Section 10 — Lawful basis

    In addition to any consent that you provide to us to process your personal information, we may also rely on other lawful basis for processing of personal information including (i) where required to do so under applicable laws, (ii) where we determine that it is in your best interest to do so and (iii) where it is in our legitimate interest to do so.

    Section 11 — Complaints

    If you believe that We have used your Personal Information contrary to Data Protection Laws, you must first attempt to resolve any concerns with Us. You can contact Us at: contact@joinjobox.com.

    If you are not satisfied with such process, you have the right to lodge a complaint with the Information Regulator, using the contact details listed below:

    Section 12 — Changes to our Privacy Policy

    We may change this Privacy Policy from time to time. Any updated versions of this Privacy Policy will be posted on Our Website. You are responsible for the continuous review of this Privacy Policy.