Privacy Policy

1. What We Collect

When you apply for a position, use our platform, or are assessed through it, we may collect personal information directly from you, including your name, contact details, education history, employment history, CV/application content, and information generated through workplace simulations, behavioural assessments, and AI-powered CV analysis.

We do not knowingly collect special personal information (e.g. health, religious belief, race, trade union membership, criminal history) unless specifically required and lawfully justified, and only with your explicit separate consent.

2. How We Use Your Information

• Assess your suitability for the position(s) you've applied for
• Communicate with you during the recruitment process
• Conduct background and reference checks, where applicable and with your consent
• Generate assessment insights shared with the hiring organisation
• Provide, maintain, and improve the Oneway Connect platform
• Process subscription payments for client organisations

3. Automated Decision-Making

Oneway Connect uses AI-powered tools to analyse CVs, score simulation performance, and generate candidate insights. These outputs support — but do not solely replace — human hiring decisions made by the employer. You have the right to:

• Be informed when a decision is based solely on automated processing
• Request that a human reviews any significant decision affecting you
• Request an explanation of the logic behind an automated assessment, on request

4. Confidentiality and Security

Your information is treated as confidential and is only accessible to authorised personnel involved in the recruitment process. We apply appropriate technical and organisational security measures, including encrypted storage and restricted access controls, to protect your data against loss, unauthorised access, alteration, or disclosure.

5. Sharing of Personal Information

Your information may be shared with:

• The employer/hiring organisation you've applied to
• Service providers who process data on our behalf (e.g. hosting, payment processing, and email delivery providers), under confidentiality obligations
• Third parties where required by law, or for verification purposes with your consent

We do not sell your personal information.

6. Cross-Border Transfers

Where a role involves placement outside South Africa, or where our service providers operate internationally, your information may be transferred across borders. Where this occurs, we ensure the receiving party is bound by conditions for processing that are substantially similar to POPIA's protections.

7. Retention

We retain your personal information only for as long as necessary for the purpose it was collected. For candidate data, this is generally up to 12 months after a role is closed, unless you request earlier deletion or longer retention is required by law. If unsuccessful, your data will be securely deleted or de-identified thereafter.

8. Your Rights

Under POPIA, you have the right to:

• Access the personal information we hold about you
• Request correction or deletion of inaccurate, irrelevant, or unlawfully processed data
• Object to processing of your information, on reasonable grounds
• Withdraw consent at any time (without affecting processing already carried out)
• Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed (enquiries@inforegulator.org.za)

9. Direct Marketing

We will not use your information for direct marketing purposes unless you separately opt in. This consent is independent of your consent to be assessed for recruitment or to use the platform.

10. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify the Information Regulator and affected data subjects as required under POPIA.

11. Contact Us

Our appointed Information Officer can be contacted at hello@onewayconnect.io for any privacy-related inquiries, access requests, or concerns.