Data protection
POPIA compliance
Grab Employment processes personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA). This page explains what we collect, the rules every candidate and employer must follow, how long we keep records, and how to exercise your rights. All POPIA requests are handled by email.
Last updated: 7 August 2026
The eight POPIA conditions we apply
Accountability
Grab Employment is the responsible party for personal information processed on this platform and ensures the POPIA conditions are met.
Processing limitation
We collect only the information needed to match candidates with jobs, verify employers and deliver purchased products — with your consent or on another lawful basis.
Purpose specification
Information is collected for a defined purpose (job applications, employer verification, job alerts, order fulfilment) and is not repurposed without notice.
Further processing limitation
Any additional processing must be compatible with the original purpose.
Information quality
You may correct your details at any time from your dashboard so records stay accurate and current.
Openness
This page, together with our Privacy Policy and Terms, documents what we collect and why.
Security safeguards
Data is stored on secured hosting with encrypted transport (HTTPS), access controls, hashed passwords and audit logging of administrative actions.
Data subject participation
You may request access to, correction of, or deletion of your personal information.
Platform rules for candidates and employers
- 1Candidates must supply accurate personal information and may not upload another person's CV or identity documents without that person's written consent.
- 2Employers may use candidate information only to assess and contact applicants for the specific advertised role. Reselling, scraping, bulk exporting or repurposing candidate data is strictly prohibited and results in account suspension.
- 3Employers must delete or de-identify applicant information once the recruitment purpose is complete or a legal retention period has ended.
- 4Special personal information (health, race, religion, criminal history) may not be requested in job ads or application forms unless legally required for the role and justified in writing.
- 5Job ads may not require payment from candidates, banking details, or copies of identity documents before an interview.
- 6All account holders must keep login credentials confidential; account activity is logged and attributable to the account holder.
- 7Suspected data breaches must be reported to contact@grabemployment.com immediately. We notify affected data subjects and the Information Regulator where POPIA requires it.
- 8All communication about POPIA requests is handled by email only.
Your rights as a data subject
Right to be informed
Know that your information is being collected and by whom.
Right of access
Request confirmation of, and a record of, the personal information we hold about you.
Right to correction
Ask us to correct or update inaccurate, irrelevant or outdated information.
Right to deletion
Ask us to delete or destroy information we are no longer entitled to keep.
Right to object
Object to processing, including direct marketing and job alert emails.
Right to complain
Lodge a complaint with the Information Regulator of South Africa.
How long we keep information
| Record type | Retention period |
|---|---|
| Candidate profile & CV | While your account is active, plus 12 months of inactivity |
| Job applications | 24 months from application date |
| Employer company records | While the account is active, plus 5 years for tax and audit purposes |
| Order and payment records | 5 years, as required by SARS |
| Email and audit logs | 24 months |
Make a POPIA request
Email contact@grabemployment.com with the subject line “POPIA request”, the email address on your account, and the right you wish to exercise. We acknowledge within 2 working days and respond within 30 days. Support is email-only so every request is logged and auditable.
Unhappy with our response? You may complain to the Information Regulator (South Africa) at complaints.IR@justice.gov.za.