Privacy Policy

Who We Are

EOR In Africa is an Employer of Record and workforce solutions service operated by AltGen Recruitment (Pty) Ltd, registration number 2022/695115/07, a private company registered in South Africa.

Our registered/business address is: Office no. 1, 2nd Floor, 20 on Krige, 20 Krige Street, Stellenbosch, 7600, South Africa.

For purposes of the Protection of Personal Information Act, 2013 (“POPIA”), AltGen Recruitment is the responsible party for personal information processed through the EOR In Africa website and in connection with enquiries and related business activities.

Where the General Data Protection Regulation (“GDPR”) applies, we may act as a controller, processor or joint controller, depending on the relevant processing activity and our relationship with the client or other party concerned.

In particular, when providing Employer of Record services, we may:

  • act as a processor where we process personal data on a client’s documented instructions; and

  • act as a controller where we process personal data to meet our own legal, tax, payroll, employment, immigration, compliance or record-keeping obligations.

The applicable service agreement and data-processing terms will govern our respective roles where we provide services to a client.

Sources of Personal Information

We may collect personal information directly from you when you use our website, submit an enquiry, communicate with us, apply for a role, send us your CV, or engage with our services.

Where lawful and appropriate, we may also receive personal information from clients, employees, contractors, candidates, recruitment platforms, referees, previous employers, publicly available professional platforms such as LinkedIn, background-screening providers, payroll and benefits providers, immigration service providers, regulatory authorities and other business partners involved in recruitment, employment or Employer of Record services.

Personal Information We Process

The personal information we process may include contact details, identification information, employment and work-history information, CVs, qualifications, references, payroll and banking details, tax information, benefits information, immigration and work-authorisation information, correspondence, website usage information and other information reasonably required to provide our services or comply with applicable law.

Lawful Basis for Processing

We process personal information only where we have a lawful basis to do so. Depending on the circumstances, we may process personal information:

  • to take steps at your request before entering into a contract;

  • to perform a contract with you, a client, supplier, employee, contractor or candidate;

  • to comply with legal, regulatory, tax, employment, immigration, payroll or reporting obligations;

  • where processing is necessary for our legitimate business interests, including workforce management, service delivery, client relationship management, website improvement, fraud prevention, security and business administration;

  • where you have provided consent for specific processing activities; and

  • where processing is necessary to establish, exercise or defend legal rights.

Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing undertaken before consent was withdrawn.

Voluntary and Mandatory Information

Providing personal information is generally voluntary. However, certain information may be required for us to respond to an enquiry, assess an application, establish an employment relationship, perform Employer of Record or payroll services, verify identity, facilitate immigration processes, administer benefits, perform a contract or comply with legal obligations.

If required information is not provided, we may be unable to provide the relevant service, process an application, conclude or perform a contract, or comply with applicable legal requirements.

Special Personal Information

In the course of employment, payroll, immigration, benefits administration, background screening or Employer of Record services, we may process special or sensitive personal information where lawful and necessary. This may include identity numbers, passport, visa and work-permit information, health or disability information, criminal-record information, race or employment-equity information, and financial or banking information.

We will process such information only where permitted by applicable law, necessary for the relevant purpose and subject to appropriate confidentiality, access-control and security safeguards.

Sharing of Personal Information

We may share personal information with group companies, clients, employees and contractors, payroll and benefits providers, recruitment partners, professional advisers, immigration and background-screening providers, technology and hosting providers, regulators and public authorities, and other service providers where this is necessary for the purposes described in this policy or required by law.

We require service providers processing personal information on our behalf to protect it appropriately and to use it only for authorised purposes.

International Transfers

EOR In Africa provides cross-border workforce services. Personal information may therefore be processed or transferred to countries outside South Africa, the European Economic Area (“EEA”) or the United Kingdom where this is necessary to provide services, manage an employment relationship, meet legal obligations or support our operations.

Where POPIA applies, we will take reasonable steps to ensure that cross-border transfers meet the requirements of POPIA.

Where the GDPR applies, we will transfer personal data outside the EEA or United Kingdom only where permitted by applicable law, including through an adequacy decision, appropriate safeguards such as standard contractual clauses, or another lawful transfer mechanism.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, comply with legal, tax, employment, immigration, payroll and record-keeping obligations, resolve disputes and enforce agreements.

The retention period may differ depending on the type of information, the applicable jurisdiction and our legal obligations.

Your Rights

Subject to applicable law, you may have the right to:

  • request access to your personal information;

  • request correction or updating of inaccurate or incomplete information;

  • request deletion of personal information where there is no lawful reason for us to retain it;

  • object to certain processing, including direct marketing;

  • request restriction of processing in certain circumstances;

  • withdraw consent where processing is based on consent;

  • request portability of certain information under the GDPR; and

  • lodge a complaint with the relevant data-protection authority.

Where we process personal information on behalf of an EOR client, requests relating to that processing may need to be directed to the relevant client as controller. We will assist where required by applicable law or our contractual obligations.

Direct Marketing

We may use contact details to send information about our services, updates, opportunities or events where legally permitted. You may opt out of marketing communications at any time by using the unsubscribe option provided or by contacting us directly.

We do not sell personal information.

Security

We take appropriate technical, organisational and contractual measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No system is completely secure, but we maintain safeguards appropriate to the nature of the information and risks involved.

Contact Us

Privacy enquiries, data-subject requests and complaints may be directed to our Information Officer / privacy contact by clicking the button below.

You may also lodge a complaint with the South African Information Regulator or, where the GDPR applies, your relevant EU or UK data-protection supervisory authority.