Privacy Policy

POPIA-compliant — Protection of Personal Information Act (Act 4 of 2013)

1. Responsible Party

StakeholderConnect is operated as a digital platform for infrastructure project management in South Africa. References to "we", "us" or "the platform" refer to the organisation operating this system.

2. What Personal Information We Collect

We collect and process the following categories of personal information:

  • Identity information: full name, ID/passport number, gender, race, age
  • Contact information: phone number, email address, physical address
  • Location data: ward number, locality, and GPS coordinates during clock-in/out
  • Employment information: trade, skill level, employment dates, UIF registration status
  • Health-related information: disability status (special personal information)
  • Photographic records: profile photos and copies of identity documents
  • Attendance and time records
  • Skills and qualification records

3. Purpose of Processing

Personal information is collected and processed solely for the following purposes:

  • Labour onboarding and workforce management on infrastructure projects
  • B-BBEE and Employment Equity compliance reporting
  • UIF registration and labour law compliance
  • Attendance tracking and payroll reporting
  • Local skills inventory and job placement matching
  • Community stakeholder engagement management

4. Legal Basis for Processing

We process personal information on the following lawful grounds under POPIA:

  • Contractual necessity — to fulfil employment and contractor obligations
  • Legal obligation — to comply with the Labour Relations Act, BCEA, EEA, UIF Act, and CIDB requirements
  • Legitimate interest — for project management and community development purposes
  • Consent — where explicitly obtained for specific processing activities

5. Special Personal Information

Race and disability status constitute special personal information under POPIA Section 26. This information is collected exclusively for B-BBEE reporting and Employment Equity compliance as required by South African law, which constitutes a lawful basis under POPIA Section 27(1)(a).

6. Data Sharing

Your personal information may be shared with:

  • Project clients and municipalities — for compliance reporting only
  • SARS, UIF, and relevant government bodies — as legally required
  • Authorised platform users (admins, social facilitators, contractors) — on a need-to-know basis

We do not sell or share personal information with third parties for marketing purposes.

7. Data Retention

Personal records are retained for the duration of the project plus a minimum of 5 years, in compliance with the National Archives and Records Service Act and the Basic Conditions of Employment Act. Records may be retained longer where required by law.

8. Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. Access is restricted by role-based controls.

9. Your Rights Under POPIA

As a data subject you have the right to:

  • Be notified when your personal information is collected
  • Access your personal information held by us
  • Request correction of inaccurate information
  • Request deletion of information where lawfully applicable
  • Object to processing of your personal information
  • Lodge a complaint with the Information Regulator

10. Information Regulator Contact

If you believe your rights have been infringed, you may contact the Information Regulator (South Africa):

inforeg@justice.gov.za 010 023 5207

11. Updates to this Policy

This policy may be updated to reflect changes in legislation or our practices. The effective date of the current version is April 2026.