Privacy Policy

Effective Date: January 1, 2025

Last Updated: January 1, 2025

Introduction

LeaveHub (Pty) Ltd ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our leave management platform at leavehub.co.za.

We are fully compliant with South Africa's Protection of Personal Information Act (POPIA) and are committed to protecting your rights as a data subject.

1. Information We Collect

1.1 Personal Information

When you use LeaveHub, we collect the following personal information:

  • Full name and employee ID
  • Email address and phone number
  • Job title and department
  • Manager and reporting structure
  • Employment start date

1.2 Leave Data

  • Leave requests and approval history
  • Leave balances and accruals
  • Leave type and duration
  • Supporting documents (medical certificates, etc.)
  • Leave calendar and schedules

1.3 Usage Data

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on pages
  • Clickstream data and usage patterns
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

Leave Management: Process and manage leave requests, approvals, and balances
Notifications: Send email and in-app notifications about leave requests and updates
Analytics: Generate reports and analytics for workforce planning
Service Improvement: Improve our platform features and user experience
Compliance: Comply with BCEA requirements and legal obligations
Security: Detect and prevent fraud, security threats, and unauthorized access

3. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Encryption

All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256 encryption.

Access Controls

Strict role-based access controls ensure only authorized personnel can access sensitive data.

Secure Infrastructure

Our platform is hosted on secure cloud infrastructure with regular security audits and monitoring.

Regular Backups

Automated daily backups ensure your data is protected against loss or corruption.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Within Your Organization

Leave information is shared with authorized managers and HR personnel within your organization as necessary for leave management.

4.2 Service Providers

We work with trusted third-party service providers who assist us in operating our platform (hosting, email delivery, analytics). These providers are bound by strict confidentiality agreements.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our legal rights.

5. Your Rights (POPIA Compliance)

Under South Africa's Protection of Personal Information Act (POPIA), you have the following rights regarding your personal data:

Right to Access

You have the right to request access to your personal information we hold.

Right to Correction

You can request correction of inaccurate or incomplete personal information.

Right to Deletion

You can request deletion of your personal information, subject to legal and contractual retention requirements.

Right to Object

You can object to the processing of your personal information for certain purposes.

Right to Data Portability

You can request a copy of your personal information in a structured, machine-readable format.

To exercise any of these rights, please contact us at privacy@leavehub.co.za

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Active employee data: Retained for the duration of employment
  • Leave records: Retained for 3 years after employment ends (BCEA requirement)
  • Financial records: Retained for 5 years (tax law requirement)
  • Usage data: Retained for 12 months

7. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience on our platform. For detailed information about our use of cookies, please see our Cookie Policy.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer: LeaveHub (Pty) Ltd
Email: privacy@leavehub.co.za
Phone: +27 21 123 4567
Address: 123 Business District, Cape Town, 8001, South Africa

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg