Protection of Personal Information Act (POPIA) Notice
This notice sets out how Labour360 collects, uses and protects personal information in accordance with the Protection of Personal Information Act 4 of 2013.
1. Introduction
Labour360 (Pty) Ltd ("Labour360", "we", "us") is committed to protecting the personal information we process in the course of providing our HR, Industrial Relations and Compliance platform to South African organisations. This notice explains how we collect, use, store and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").
2. Information we collect
Depending on how you use Labour360, we may process: account and contact details (name, email, phone number, employer); employee records entered by our customers (identity numbers, employment history, disciplinary records, payroll and leave data); usage data (login activity, audit logs); and information you submit through our contact and demo request forms.
3. Roles: responsible party and operator
For information submitted directly to us (e.g. via our contact or demo request forms, or account registration), Labour360 acts as the responsible party. For employee and case data that our customers capture within the platform, Labour360 acts as an operator processing personal information solely on the instruction of, and for the purposes defined by, the customer (the responsible party).
4. Purpose of processing
We process personal information to: provide and support the Labour360 platform; respond to enquiries and demo requests; maintain the security, integrity and audit trail of the system; comply with legal and contractual obligations; and improve our products and services.
5. Lawful basis
We rely on one or more of the following grounds recognised under POPIA: consent, performance of a contract, compliance with a legal obligation, and our legitimate interests in operating and securing our platform, provided these do not override the interests of data subjects.
6. Sharing of information
We do not sell personal information. We may share personal information with sub-processors who help us deliver the platform (e.g. cloud hosting and email delivery providers), each bound by contractual confidentiality and security obligations, and where required by law or a valid legal process.
7. Cross-border transfers
Where personal information is processed or stored outside South Africa (for example on cloud infrastructure), we ensure such transfers are subject to appropriate safeguards consistent with POPIA's requirements for cross-border transfers.
8. Security safeguards
We implement appropriate technical and organisational measures to protect personal information against loss, unauthorised access, interference, modification or disclosure, including access controls, encryption in transit, multi-tenant data isolation and audit logging.
9. Retention
Personal information is retained only for as long as necessary to fulfil the purposes described in this notice, or as required by applicable labour, tax or other law, after which it is securely deleted or anonymised.
10. Your rights
Subject to POPIA, you have the right to access, correct or delete your personal information, to object to processing, to withdraw consent where processing is based on consent, and to lodge a complaint with the Information Regulator of South Africa.
11. Contact us
For any questions about this notice, or to exercise your rights under POPIA, please contact our Information Officer at sales@labour360.com or via our contact page.