Privacy Policy

Last updated: February 2026

ShumelaHire, operated by Arthmatic DevWorks (Pty) Ltd, is committed to protecting the personal information of all users and candidates processed through the platform. This Privacy Policy explains how we collect, use, store, and protect personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA).

1. Information We Collect

We collect the following categories of personal information through the platform:

Candidate data. Information submitted by or about candidates during the recruitment process, including names, contact details, CVs, qualifications, interview notes, assessment scores, and reference check outcomes. This data is collected and processed on behalf of the organisation conducting the recruitment.

User account data. Information provided during account registration and platform use, including names, email addresses, job titles, and organisational affiliations.

Usage data. Technical information about how users interact with the platform, including browser type, device information, pages visited, and feature usage patterns. This data is collected automatically and is used to improve platform performance and reliability.

2. How We Use Your Information

Personal information collected through ShumelaHire is used for the following purposes:

• Recruitment workflows. Processing candidate applications, facilitating evaluations, scheduling interviews, and managing hiring decisions on behalf of subscribing organisations.
• Platform operation. Authenticating users, managing permissions, delivering notifications, and providing customer support.
• Analytics and reporting. Generating aggregated, anonymised analytics to help organisations measure and improve their hiring processes. Individual candidate data is never used for purposes beyond the specific recruitment process without explicit consent.

3. Data Storage and Security

All data processed through ShumelaHire is stored on infrastructure hosted within the Amazon Web Services (AWS) Africa (Cape Town) region. Data does not leave South African borders unless explicitly configured by the subscribing organisation.

Security measures include encryption of data in transit and at rest, role-based access controls enforced at the application level, regular security assessments, and comprehensive audit logging of all data access events.

4. Data Retention

ShumelaHire retains personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Subscribing organisations can configure retention periods according to their own policies.

When data is no longer required, it is securely deleted or anonymised. Organisations may request bulk deletion of candidate data at any time through the platform administration interface or by contacting our support team.

5. Your Rights Under POPIA

Under the Protection of Personal Information Act, you have the following rights regarding your personal information:

• Access. You may request confirmation of whether we hold personal information about you and request access to that information.
• Correction. You may request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, or misleading.
• Deletion. You may request deletion of personal information that is no longer necessary for the purpose for which it was collected.
• Objection. You may object to the processing of your personal information on reasonable grounds.

To exercise any of these rights, please contact our data protection officer using the details provided below.

6. Third-Party Services

ShumelaHire uses Amazon Web Services (AWS) for cloud infrastructure, including compute, storage, and database services. AWS operates under its own data processing agreements and complies with international data protection standards.

We do not sell, rent, or trade personal information to third parties. Personal information is shared with third parties only where required by law or where necessary to provide the platform services as contracted with subscribing organisations.

7. Contact

For questions about this Privacy Policy, to exercise your rights under POPIA, or to report a data protection concern, please contact our data protection officer:

Email: hello@shumelahire.co.za

We will respond to all requests within the timeframes prescribed by POPIA.