How we use your personal information
Last updated: 29 July 2026
Privacy & POPIA notice
SecureMarket (securemarket.co.za) is operated by SecureGrid (Pty) Ltd (2026/375707/07), of No 3 Watersedge, Eagles Landing, Hartebeespoort, North West, 0216 — the “responsible party” under the Protection of Personal Information Act, 2013 (POPIA). This notice explains what personal information we collect, why, who we share it with, and the rights POPIA gives you. Questions and privacy requests: info@securemarket.co.za (attention: Rozelda Beurens, Information Officer).
It covers three groups: job-seekers with a SecureMarket profile, companies (their contact people) that hire through SecureMarket, and visitors browsing without an account.
What we collect
Job-seekers
Your profile is what you choose to build, and most of it exists so companies can find and assess you — that’s the service:
- Identity & contact — name, email, phone/WhatsApp, date of birth, gender.
- Location — province, city and home area (used for matching and travel practicality, never precise GPS tracking).
- PSIRA details — your PSIRA number and grade. We check these against PSIRA’s records to show your verification status (“verified both ways” is the point of SecureMarket). If you tell us PSIRA isn’t relevant to the work you want, we store that choice instead.
- Security-work profile — experience type and years, firearm competency and its expiry, driver’s licence code, own transport, shift availability, languages.
- Qualifications & skills — your highest education level, certificates and skills, chosen from our lists. These are self-declared and drive job matching (“Jobs I qualify for” / “Strong matches for me”).
- Work history & references — roles you add, and referees’ names, relationship, phone and email. References are someone else’s personal information — only add a referee if they’ve agreed (see “Your references”, below).
- Documents & photo — CVs, certificates and a profile photo you upload. Stored in our document vault; sensitive documents are never shown publicly.
- Applications — when you apply, a snapshot of your profile at that moment is shared with the hiring company (see “Who we share it with”).
- Account activity — saved jobs, job alerts you create, subscription/plan status, your visibility choice (whether companies can find you in candidate search).
Companies
Business registration details, PSIRA business status, contact people’s names and work contact details, job posts (including requirements and salary information you choose to publish), billing records, and how candidates are processed in your pipeline.
Everyone (including visitors)
Basic technical data — IP address, browser/device information, pages viewed — collected through Microsoft Azure Application Insights so the site works and we can fix what breaks. We use functional storage in your browser for preferences (e.g. display settings); we do not run third-party advertising trackers.
Where it comes from
Almost everything comes from you. Two exceptions: verification results come from PSIRA’s records (we submit the number and grade you gave us and record the outcome), and application-related updates (shortlisting, decisions) come from the company you applied to.
Why we process it (and the legal grounds)
| Purpose | Ground under POPIA |
|---|---|
| Running your profile, search, matching and applications | Performing our contract with you |
| PSIRA verification and the verified badge | Contract + legitimate interest (a trustworthy marketplace); PSIRA's own regulatory framework governs those records |
| Sharing your application snapshot with the company you applied to | Contract — it's the application you asked us to send |
| Qualifications-based matching and fit filters | Contract (features you invoke) |
| Billing and subscriptions | Contract + legal obligations (tax/accounting) |
| Job alerts and service emails | Consent (alerts you create) + contract (service messages) |
| Fraud prevention, abuse, security | Legitimate interest + legal obligation |
| Aggregated, de-identified statistics | Legitimate interest (no re-identification) |
Providing profile information is voluntary — but without the essentials (identity, contact, and for PSIRA-graded work your PSIRA details) we can’t provide matching or applications, and companies can’t assess you. Where a field is optional it’s labelled that way in the product.
Special and sensitive information
We don’t ask for information about race, religion, health, or biometrics. PSIRA registration status is regulatory information tied to the security industry and is processed strictly for verification. Date of birth and gender are used for identity and lawful industry requirements only. SecureMarket is for people 18 and older; we don’t knowingly process children’s information.
Who we share it with
- The hiring company you apply to — your application snapshot (profile, PSIRA status, security profile, qualifications, experience, references and CV documents where included). Once shared, that company is its own responsible party under POPIA and must use your information only for recruitment — our Terms bind them to that.
- PSIRA — the number/grade you provided, to perform the verification check.
- Payment processing — PayFast. Card and payment details are handled by the processor; we don’t store your card number.
- Microsoft Azure — our hosting and telemetry platform. Production systems run in the Azure South Africa North region (Johannesburg), so your data is primarily stored in South Africa. Limited operational telemetry may be processed in other Microsoft regions under Microsoft’s safeguards.
- Professional advisers / authorities — if the law requires it or a legal claim demands it.
We do not sell personal information. Ever.
Cross-border transfers
Primary storage is in South Africa. Where a service provider processes limited data outside South Africa (e.g. cloud telemetry), we rely on providers whose contractual safeguards meet POPIA section 72’s requirements.
Your rights
POPIA gives you the right to access the information we hold about you, correct it, delete it where we have no lawful basis to keep it, object to processing based on legitimate interest, withdraw consent (e.g. delete a job alert), and to know who we’ve shared it with. Most of your profile is directly editable at your profile; for anything else email info@securemarket.co.za with the subject “Privacy request” — we aim to acknowledge within 5 business days.
You can also complain to the Information Regulator (South Africa): Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 · enquiries@inforegulator.org.za · POPIAComplaints@inforegulator.org.za · 010 023 5200 / 0800 017 160.
How we protect and keep it
Encryption in transit, access controls, segregated document storage, and audit trails on sensitive views (e.g. when a company exports a CV, it’s recorded). We keep your information while your account is active; if you close your account we delete or de-identify your profile within a reasonable period, keeping only what the law (tax, dispute-limitation periods) requires us to keep.
Your references
When you add a referee you’re giving us someone else’s personal information. You confirm they know and agree. Referees can email info@securemarket.co.za to have their details removed.
Changes
We’ll update this notice as the product evolves and change the date above; material changes are flagged in-product.
Need help with something else? See Support.