POPIA Compliance Notice

1. Introduction

Pakanyo HR Solutions ("we", "us", "our") is committed to protecting the privacy and security of your personal information in accordance with the Protection of Personal Information Act (POPIA) of 2013. This notice explains how we collect, use, disclose, and safeguard your personal information when you interact with us, whether through our website, services, or business operations.

By engaging our services or using our website, you acknowledge the practices described in this notice. We encourage you to read this notice carefully.

2. Who We Are

Pakanyo HR Solutions is a South African HR consulting and skills development company. We provide recruitment, leadership development, HR consulting, and accredited training solutions to organisations across multiple industries.

Registered Address: Egoli East, 10 South Boulevard Street, Bruma, Johannesburg

Phone: 087 255 6507

Email: info@pakanyo.co.za

Website: www.pakanyo.co.za

3. What Personal Information We Collect

We may collect the following categories of personal information:

• Contact Information: Name, surname, email address, telephone number, and physical address.
• Professional Information: Job title, company name, industry, and professional qualifications.
• Communication Records: Correspondence, enquiries, and feedback submitted via our website, email, or telephone.
• Service Delivery Information: Information necessary for the provision of our HR consulting, recruitment, and training services, including CVs, employment history, and educational records.
• Website Usage Data: IP address, browser type, device information, pages visited, and interaction data collected through cookies and similar technologies.

4. How We Collect Your Information

We collect personal information in the following ways:

• Directly from you: When you fill out forms on our website, contact us via email or telephone, engage our services, or provide documentation as part of a service engagement.
• From third parties: With your consent, we may receive information from our clients, partners, or publicly available sources where permitted by law.
• Automatically: When you visit our website, certain technical information is collected automatically through cookies and analytics tools.

5. Purpose of Processing

We process your personal information for the following legitimate purposes:

• To provide and manage our HR consulting, recruitment, and skills development services.
• To communicate with you regarding service delivery, enquiries, and administrative matters.
• To process applications for training programmes, learnerships, and employment opportunities.
• To comply with legal and regulatory obligations, including those under POPIA and sector-specific legislation.
• To improve our website, services, and customer experience through analytics and feedback.
• To send service-related communications and, with your consent, marketing information about our services.

6. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: Where you have provided explicit consent for specific processing activities.
• Contractual necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal obligation: Where processing is required to comply with applicable laws and regulations.
• Legitimate interest: Where processing is necessary for our legitimate business interests, provided your rights do not override those interests.

7. Information Sharing and Disclosure

We may share your personal information with the following categories of recipients:

• Service providers: Third-party vendors who assist us with IT services, payment processing, training delivery, and administrative support.
• Regulatory bodies: Where required by law, we may disclose information to QCTO, SETAs, SAQA, and other relevant authorities for accreditation and compliance purposes.
• Professional advisors: Legal, accounting, and consulting professionals who provide services to us.
• With your consent: To any other third party with your explicit consent.

We do not sell your personal information to third parties. All third-party service providers are contractually bound to protect your information and process it only for the purposes we specify.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure servers and encrypted data transmission where appropriate.
• Access controls and authentication procedures for personnel handling personal information.
• Regular security reviews and updates to maintain data protection standards.
• Data retention policies to ensure information is not kept longer than necessary.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws. Specific retention periods are determined by:

• The nature of the service provided and the contractual relationship.
• Legal and regulatory requirements, including record-keeping obligations under the Skills Development Act and other applicable legislation.
• Statute of limitations periods for potential legal claims.

When information is no longer required, we securely delete or anonymise it.

10. Your Rights Under POPIA

As a data subject, you have the following rights under POPIA:

• Right of access: You may request confirmation of whether we hold your personal information and request a copy of that information.
• Right to correction: You may request that we correct or update inaccurate or incomplete personal information.
• Right to deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Right to object: You may object to the processing of your personal information on reasonable grounds.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.
• Right to complain: You have the right to lodge a complaint with the Information Regulator (South Africa) if you believe we have violated your privacy rights.

11. Contact Information

If you have any questions, concerns, or requests regarding this POPIA Compliance Notice or our data protection practices, please contact us:

Information Officer:
Pakanyo HR Solutions
Egoli East, 10 South Boulevard Street, Bruma, Johannesburg
Phone: 087 255 6507
Email: info@pakanyo.co.za

12. Complaints to the Information Regulator

If you are not satisfied with our response to any data protection concern, you have the right to lodge a complaint with the Information Regulator (South Africa):

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Phone: +27 (0)10 406 4999
Email: enquiries@inforegulator.org.za
Website: www.inforegulator.org.za

13. Updates to This Notice

We may update this POPIA Compliance Notice from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website. We encourage you to review this notice periodically.

Last updated: May 2026