top of page

KEY CONNECTIONS RECRUITMENT • PRIVACY & COOKIE POLICY

​

Effective Date: June 2026

​

1. Introduction

Key Connections ("the Company", "We", "Us", or "Our") collects, stores, uses, and protects personal information in strict compliance with the Protection of Personal Information Act (POPIA) of South Africa and, where applicable, the General Data Protection Regulation (GDPR). This policy applies globally to all authorized personnel, independent contractors, and digital visitors.

 

2. Information We Collect & Sourced Data

​

We may collect and process the following personal data for headhunting and placement purposes:

  • Contact & Identification Data: Full name, identification numbers, nationalities, work permits, and contact details.

  • Professional History: Curriculum Vitae (CV), employment history, qualifications, current/expected salary metrics, and psychometric results.

  • Sourced Data: Professional profile data and educational milestones sourced from publicly available professional networks (such as LinkedIn) and corporate directories during targeted talent-sourcing and headhunting operations.

 

3. Purpose & Legal Basis for Processing

 

3.1 Lawful Grounds for Processing

​

Your personal data is processed solely for search, selection, and employment-matching purposes under the following lawful grounds:

  • Contractual Necessity: To perform or conclude actions relating to your request for placement and employment-matching services with our corporate clients.

  • Consent: Where you have provided voluntary consent to be considered for active market opportunities or to receive direct career outreach from our consultants.

 

3.2 CV Parsing & Screening

​

We utilize software and CV parsing tools to index and filter candidate qualifications against specific client job mandates. However, we do not utilize purely automated decision-making or AI-driven systems to conclusively reject or disqualify candidates; all final evaluations involve direct human review by our recruitment consultants.

 

4. Processing of Special Personal Information (Vetting)

​

For advanced stages of the recruitment process (typically when an employment offer from a client is imminent), the Company may conduct background screening, including criminal record checks, credit history checks, and qualification verifications.

The processing of this Special Personal Information is never conducted implicitly; it strictly requires separate, explicit, and written consent prior to executing checks via our designated verification vendors.

​

5. Cross-Border Data Transfers

​

The Company utilizes secure, enterprise-grade cloud hosting services and Software-as-a-Service (SaaS) platforms that leverage servers located outside the borders of South Africa (including the EU and US regions). In accordance with Section 72 of POPIA, we ensure that our international infrastructure and database vendors are bound by Data Processing Addendums (DPAs) and maintain data protection standards equivalent to or tougher than POPIA.

 

6. Data Retention Policy

​

In compliance with Section 14 of POPIA, we do not retain data longer than necessary:

  • Standard Search & Selection Submissions: If you submit your CV or engage with us for a specific vacancy, your data will be retained for the duration of the recruitment loop. If no placement is made and you do not wish to be considered for future headhunting opportunities, your data will be permanently deleted or irreversibly anonymized once the specific placement loop closes.

  • Active Headhunting Pipeline: If you provide explicit consent for us to keep your profile on file for future executive search and selection mandates, we will retain your CV and metrics for a maximum period of 3 years (36 months) from your last active interaction or communication with us. Upon expiration, data is permanently purged unless actively renewed.

  • Minors: Our services are exclusively directed at individuals aged 18 and older. If we discover a minor has submitted data, it will be immediately and permanently purged.

 

7. Cookie Policy

​

Our website uses cookies to enhance browsing, analyze site traffic, and optimize website performance. We utilize Essential Cookies (necessary for secure site navigation and contact forms) and Analytics Cookies (to understand visitor interactions). You can manage or disable cookies via your browser settings.

 

8. Your Rights & Regulatory Escalation

 

8.1 Your Privacy Rights

​

Under POPIA and GDPR, you hold the Right of Access, Right to Correction, Right to Erasure ("Right to be Forgotten"), and the Right to Object to processing or outreach at any time. To exercise these rights, utilize the unsubscribe functionalities in our communications, or email our Information Officer directly at info@keyconnections.co.za.

 

8.2 Regulatory Complaint

​

You have the right to lodge a formal complaint regarding our data handling practices with the South African Information Regulator:

bottom of page