Privacy Policy (South Africa)

Last Updated: July 23, 2025
Last Reviewed: July 23, 2025
Applies to: South African Users of Jobbers.io
Entity: Varlorys (French Sole Proprietorship)
Governing Law: Protection of Personal Information Act (POPIA) and South African Privacy Laws
Platforms: Website (jobbers.io) and Mobile Apps (iOS/Android)

1. Introduction

This Privacy Policy explains how Jobbers.io (operated by Varlorys, a French sole proprietorship) collects, uses, discloses, and manages your personal information when you use our website at https://www.jobbers.io and our mobile applications for iOS and Android (collectively, the “Platform”).

Jobbers.io is an international freelance marketplace operated from France, serving users worldwide including South Africa. We facilitate connections between freelancers/professionals and clients by providing a platform for them to find each other, communicate, and arrange their own work agreements and payments.

As a South African resident, you have specific rights under South African data protection law, which are outlined in this policy. As a French-based company serving South African users, we comply with the Protection of Personal Information Act (POPIA), the Electronic Communications and Transactions Act (ECTA), and other applicable South African privacy laws.

POPIA Compliance Commitment

We are committed to protecting your privacy in accordance with the Protection of Personal Information Act (POPIA) and other South African privacy laws. Our data processing practices are based on POPIA principles:

Lawfulness of Processing: We process personal information lawfully and in a reasonable manner
Purpose Specification: We collect personal information for specific, explicitly defined and legitimate purposes
Further Processing Limitation: We process personal information only in a manner compatible with the purpose of collection
Information Quality: We ensure personal information is complete, accurate, not misleading and updated
Openness: We ensure data subjects are aware of the processing of their personal information
Security Safeguards: We implement appropriate security measures to protect personal information
Data Subject Participation: We respect the rights of data subjects regarding their personal information
Accountability: We ensure compliance with POPIA conditions

Key Information for South African Users:

French Data Controller: We are based in France and subject to French and South African data protection laws
International Platform: Your data will be processed to connect freelancers and clients globally
Cross-Border Transfers: Some data may be transferred outside South Africa with appropriate safeguards
Your Rights: You have comprehensive rights under POPIA as outlined in section 12
Marketplace Role: We facilitate connections but users arrange their own payments and contracts

2. Responsible Party Information

Responsible Party: Varlorys
Business Type: French Sole Proprietorship (Entreprise Individuelle)
Registration Number: 894 375 625 R.C.S. Pontoise
Business Address: 145 Rue du général Leclerc, 95130 Franconville, France
Service: International Freelance Marketplace
Contact Person: Driss LJAM BENNIS
Information Officer: [email protected]

3. Personal Information We Collect

We collect personal information necessary to operate our freelance marketplace and provide our services. Under POPIA, we limit our collection to information that is adequate, relevant, and not excessive for the purpose of collection.

3.1 Account and Profile Information

Registration Details: Name, email address, password, username
Age Verification: Confirmation that user is at least 18 years old
Verification Data: Email verification, phone number verification
Profile Information: Professional skills, work experience, education, service descriptions
Contact Information: Phone number, preferred communication methods
Profile Media: Profile pictures, portfolio images, work samples, certifications
Professional Documentation: Certificates, qualifications, professional credentials
Contact Visibility Preferences: Settings for displaying contact details through premium packs
Content Moderation Data: Information reviewed and modified by our administrators for compliance

3.2 Premium Services and Billing Information

Premium Package Purchases: Connection Packs, Professional Packs, Service Packs, Contact Packs, Project Packs
Payment Details: Payment card details for platform services (processed by payment providers)
Billing Information: Billing addresses, payment preferences for platform services
Package Usage: Visibility boost usage, contact detail displays, search ranking improvements

3.3 Platform Activity Data

Job and Project Data: Job postings, project descriptions, service offerings, proposals
Proposal Management: Proposal statuses (accepted, pending, rejected), proposal content
Communication Records: Chat messages, file sharing through our messaging system
Ratings and Reviews: Reviews and ratings between freelancers and clients
Portfolio Content: Work samples, portfolios, certifications, professional qualifications
Search and Browse History: Jobs viewed, searches performed, saved profiles
Contact Interactions: When contact details are displayed or accessed through premium packs
AI Translation Data: Content submitted for automatic translation services

3.4 Technical Information

Device Information: Device type, operating system, browser type, unique device identifiers
Usage Data: Pages visited, time spent, click patterns, feature usage
Network Information: IP address, internet service provider, connection type
Cookies and Tracking: As described in our Cookie Policy

3.5 Mobile App Permissions and Data

Our mobile apps may request the following permissions to provide enhanced functionality:

Camera: To take profile photos and capture documents for verification
Photo Library: To upload images for profiles and portfolios
Contacts: To help you connect with existing contacts on the platform (with your consent)
Location Services: To show location-based job opportunities and verify your location
Push Notifications: To send important updates about jobs, messages, and platform activities
Microphone: For voice messages and video calls (if available)
Storage Access: To store app data and enable offline functionality
Network Access: To connect to our services and sync data

Note: You can manage these permissions through your device settings at any time.

4. How We Collect Personal Information

Under POPIA, we are transparent about how we collect your personal information:

4.1 Direct Collection

Account Registration: When you create an account (must be 18+ years old)
Profile Creation: When you set up your freelancer or client profile
Verification Processes: Email and phone number verification
Form Submissions: Contact forms, job applications, project postings
Communications: When you contact us or communicate with other users
Administrative Review: During our validation process for profiles, services, and projects
Surveys and Feedback: Voluntary participation in platform surveys
Rating and Review System: When you provide or receive evaluations

4.2 Automated Collection

Website and App Usage: Through cookies, analytics, and tracking technologies
Device Information: Automatically collected when you access our platform
Location Data: Through IP address or GPS (with permission on mobile)
Performance Monitoring: App crashes, error reports, usage statistics

4.3 Third-Party Sources

Social Media: When you connect social media accounts (with your consent)
Payment Providers: Transaction and verification data from PayPal, Stripe
Verification Services: From email and SMS verification providers
Public Sources: Publicly available professional information

5. Lawful Bases and Purposes for Processing

Under POPIA, we process your personal information based on the following lawful bases and for the following purposes:

Purpose	Information Used	Lawful Basis (POPIA)	Retention Period
Core Platform Services
Account Management	Registration data, profile information	Contract performance, Legitimate interests	Account lifetime + 7 years
Facilitating User Connections	Profile data, skills, location, contact preferences	Contract performance	Account lifetime + 3 years
Premium Package Services	Package purchases, visibility preferences, contact display settings	Contract performance	7 years after purchase
Platform Communication Tools	Chat messages, file sharing, contact exchanges	Contract performance	3 years after last communication
AI Translation Services	User content for automatic translation	Contract performance	Processing duration only
Platform Safety and Security
Account Verification	Email address, phone number	Legitimate interests, Legal compliance	3 years after verification
Content Moderation and Compliance	Profile content, service descriptions, project posts	Legitimate interests, Legal compliance	3 years after moderation
Age Verification	Age confirmation during registration	Legal compliance	Account lifetime
Administrative Review Process	Profile information, service listings, project posts	Legitimate interests	3 years after review
Platform Security	Access logs, device information, security events	Legitimate interests	1 year
Legal and Compliance
Legal Compliance	All relevant personal information	Legal compliance	As required by law
Platform Dispute Prevention	Communication records, user interactions, ratings	Legitimate interests	3 years after interaction
Platform Improvement (Consent Required)
Analytics and Insights	Usage data, performance metrics	Consent	2 years
Product Development	Feature usage, feedback, app performance	Consent	2 years
Personalization	Preferences, search history, job matches	Consent	Until consent withdrawal
Marketing and Communications
Platform Notifications	Contact information, activity data	Contract performance	Account lifetime
Marketing Communications	Contact details, preferences	Consent	Until consent withdrawal
Customer Support	Account data, support history, communications	Contract performance	3 years after last contact

6. Disclosure of Personal Information

Under POPIA, we limit the disclosure of personal information to the purposes for which it was collected. We may disclose your personal information in the following circumstances:

6.1 With Other Platform Users

Public Profile Information: Name, profile picture, skills, services, reviews, portfolio
Contact Details: Phone number and email (through premium Contact Packs, when authorized)
Communication: Direct messaging through our chat system for project discussions
Project Information: Project details, proposals, and related communications
Reviews and Ratings: Feedback provided by clients and freelancers
Portfolio Content: Work samples, certifications, and professional credentials

6.2 With Data Processors

Payment Processors: PayPal, Stripe (for platform premium package purchases only)
Cloud Hosting: AWS, Google Cloud (for data storage and processing)
Analytics Services: Google Analytics (for platform analytics, with consent and data processing agreement)
Communication Tools: Email and messaging service providers
AI Translation Services: Third-party providers for automatic content translation
Verification Services: Email and SMS verification providers
Customer Support: Help desk and support platforms

6.3 Legal and Compliance Disclosure

Law Enforcement: When required by law or court order
Regulatory Authorities: For compliance with applicable laws including POPIA
Legal Proceedings: In connection with legal disputes or investigations
Safety Protection: To protect the safety of users or the public

6.4 Business Transfers

If our business is sold, merged, or acquired, your personal information may be transferred to the new owners as part of the business assets, subject to the same privacy protections and POPIA requirements.

7. Cross-Border Transfers of Personal Information

As an international platform, some of our service providers are located outside South Africa. Under POPIA Section 72, we ensure appropriate safeguards are in place for cross-border transfers.

7.1 Countries Where Your Data May Be Transferred

Germany: Our primary operations and main servers
European Union: Additional hosting and service providers
United States: Cloud services (Google, AWS), payment processors (Stripe, PayPal)
Other Countries: Where freelancers, clients, and service providers are located

7.2 Transfer Safeguards

We implement the following safeguards for cross-border transfers under POPIA:

Adequate Level of Protection: For transfers to countries with adequate protection levels
Contractual Safeguards: Binding corporate rules and data processing agreements
Industry Codes: Adherence to approved codes of conduct and certification schemes
Authorization from Information Regulator: Where required for specific transfers
Your Consent: Explicit consent for specific transfers where appropriate
Legal Safeguards: Other lawful means recognized under POPIA

7.3 Platform-Specific Transfers

As a global freelance marketplace, transferring your data internationally is essential for:

Connecting you with freelancers and clients worldwide
Processing premium package purchases
Providing AI translation services for multilingual communication
Providing customer support across time zones
Ensuring platform security and preventing abuse
Facilitating direct communication and project arrangements between users

8. Retention and Destruction of Personal Information

Under POPIA Section 14, we retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

Information Type	Retention Period	Legal Basis for Retention
Account Information	Until account deletion + 7 years	Legal obligations, limitation periods
Premium Package Purchases	7 years after purchase	Financial compliance, tax obligations
Communication Records	3 years after last communication	Platform safety, legitimate interests
Verification Records	3 years after verification	Account security, fraud prevention
Marketing Preferences	Until consent withdrawn	Consent-based processing
Usage Analytics	2 years	Platform improvement, legitimate interests
Security Logs	1 year	Security monitoring, legitimate interests

9. Security Safeguards for Personal Information

Under POPIA Section 19, we implement appropriate technical and organizational measures to ensure the security of personal information:

9.1 Technical Safeguards

Encryption: Personal information encrypted in transit and at rest using industry standards
Access Controls: Multi-factor authentication and role-based access systems
Network Security: Firewalls, intrusion detection, and continuous monitoring
Regular Updates: Security patches and system updates applied regularly
Data Anonymization: Anonymization techniques where technically feasible
Backup Systems: Secure backup and disaster recovery procedures

9.2 Organizational Safeguards

Staff Training: Regular privacy and security training for all employees
Background Checks: Screening of personnel with access to personal information
Incident Response: Comprehensive procedures for handling security incidents
Data Processing Agreements: Contracts with all third-party data processors
Privacy by Design: Privacy considerations integrated into system design
Regular Audits: Periodic security and privacy assessments

9.3 Data Breach Response

In the event of a data breach under POPIA Section 22:

We will notify the Information Regulator within 72 hours where required
We will notify affected data subjects without undue delay when the breach poses a risk
We will provide information about the breach, its consequences, and mitigation measures
We will document the breach and our response for regulatory review
We will implement additional safeguards to prevent similar incidents

10. Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy (South Africa). Key points include:

Essential Cookies: Required for platform functionality (legitimate interests)
Analytics Cookies: To understand platform usage (consent required)
Marketing Cookies: For advertising and personalization (consent required)
Third-Party Cookies: From our service providers and partners
Google Analytics: We have a data processing agreement with Google and anonymize IP addresses

You can manage your cookie preferences through our consent management platform and your browser settings.

11. Direct Marketing and Communications

11.1 Platform Communications

We will send you essential platform communications based on contract performance:

Account security notifications
Transaction confirmations
Important platform updates
Legal and policy changes

11.2 Direct Marketing Communications

Under POPIA Section 69 and the Protection of Personal Information Regulations, with your explicit consent we may send:

Newsletter and platform updates
Job recommendations and opportunities
Feature announcements
Educational content and tips

You can opt-out at any time using the unsubscribe link or contacting us. We maintain a suppression list for opt-out requests.

12. Your Rights Under POPIA

Under the Protection of Personal Information Act, you have the following rights regarding your personal information:

12.1 Data Subject Rights (POPIA Chapter 3)

Right to Access (Section 23): Request confirmation of whether we process your personal information and access to such information
Right to Correction (Section 24): Request correction, destruction or deletion of inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained personal information
Right to Object (Section 11(3)): Object to the processing of your personal information
Right to Restriction: Request restriction of processing in certain circumstances
Right to Data Portability: Receive your personal information in a structured, commonly used format
Right to Withdraw Consent: Withdraw consent for processing based on consent

12.2 How to Exercise Your Rights

To exercise your rights under POPIA:

Email: [email protected]
Subject Line: “POPIA Rights Request – [Type of Request]”
Include: Your account email, specific request details, identity verification
Response Time: We will respond within one month (extendable by two months for complex requests)
Fees: No charge for standard requests (reasonable fees may apply for excessive requests)

12.3 Complaint Process

If you have a privacy complaint:

Contact Us First: Send your complaint to [email protected]
We Will Investigate: We’ll investigate and respond within one month
Information Regulator: You have the right to lodge a complaint with the Information Regulator of South Africa

12.4 Quick Data Request Form

For common requests, you can use our simplified request process:

Name: [Your Full Name]

Email: [Your Account Email]

ID Number: [South African ID Number for verification]

Request Type:

Submit a request for access to the personal information we process about you
Submit a request for correction or deletion of personal information
Submit a request to receive a copy of your personal information
Submit an objection to processing of your personal information
Submit a request to restrict processing of your personal information
Submit a request to withdraw consent for processing

Send your completed request to: [email protected]

13. Children’s Personal Information

Our platform is strictly intended for individuals who are 18 years of age or older. Under POPIA, we take special care with children’s personal information and do not knowingly process personal information of children under 18 years of age without appropriate consent.

Age Verification: During registration, users must confirm they are at least 18 years old. This is required for:

Legal capacity to enter into work agreements
Compliance with our terms of service
Protection of children from inappropriate content
Meeting legal requirements for freelance marketplace participation

If we become aware that we have collected personal information from someone under 18 without appropriate consent, we will take immediate steps to delete such information and terminate the account.

If you believe we have collected information from someone under 18 without proper consent, please contact us immediately at [email protected].

14. Automated Processing and Decision-Making

Under POPIA, we inform you about automated processing and decision-making:

14.1 Automated Processes We Use

Content Moderation: Automated systems help review user-generated content for compliance
Fraud Prevention: Automated systems detect potentially fraudulent activities
AI Translation: Automated translation of user content for multilingual accessibility
Search and Matching: Automated algorithms help match freelancers with relevant job opportunities

14.2 Your Rights

You have the right to:

Not be subject to decisions based solely on automated processing that significantly affect you
Request human intervention in automated decision-making processes
Express your point of view and contest automated decisions
Receive information about the logic, significance, and consequences of automated processing

15. Content Moderation and Administrative Review

To maintain platform quality and safety, we conduct administrative review and content moderation:

15.1 Administrative Validation Process

Profile Review: All freelancer and professional profiles require admin approval before going online
Service Validation: New or modified service listings are reviewed before publication
Project Approval: Client project postings are validated before becoming visible
Content Modification: We may edit content to remove contact details, correct categories, or remove inappropriate content

15.2 What We Review

Professional qualifications and service descriptions
Compliance with platform guidelines and POPIA
Removal of personal contact details from inappropriate fields
Category accuracy and content relevance
Age verification (18+ requirement)

15.3 Content Standards

We review content to ensure it is not:

Abusive, defamatory, or discriminatory
Misleading about qualifications or services
Containing inappropriate personal information disclosure
Violating intellectual property rights
Against applicable laws and regulations including POPIA

16. Our Role as a Marketplace Facilitator

Important: Jobbers.io acts as a marketplace facilitator that connects freelancers and clients. We provide the platform and tools for users to find each other and communicate, but we do not:

Process payments between users: Users arrange their own payment methods and terms
Mediate disputes: Users handle project disputes directly with each other
Guarantee work quality: We provide a rating system but users are responsible for vetting each other
Act as an employer: We facilitate connections but are not party to work agreements

We do provide:

Platform hosting and maintenance
Communication tools (chat, file sharing)
Premium visibility and contact packages
AI translation services
User verification (email and phone)
Rating and review systems

17. Third-Party Services and Links

Our platform may contain links to third-party websites, services, or integrations. This privacy policy does not apply to third-party services. We recommend reading the privacy policies of any third-party services you use.

17.1 Social Media Integration

If you connect social media accounts, we may access certain information from those platforms according to your privacy settings on those platforms.

17.2 Payment Processors

Payment processing is handled by third-party providers (PayPal, Stripe) who have their own privacy policies and are responsible for protecting your payment information under appropriate data processing agreements.

18. Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices, technology, legal requirements, or other factors. Under POPIA, we will notify you of material changes by:

Posting the updated policy on our platform
Updating the “Last Updated” date
Sending email notifications for significant changes
Obtaining fresh consent where required by POPIA
Providing reasonable notice before changes take effect

We encourage you to review this policy periodically to stay informed about how we protect your privacy.

19. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Responsible Party Details:

Varlorys (French Sole Proprietorship)
Registration: 894 375 625 R.C.S. Pontoise
Business: International Freelance Platform (Jobbers.io)
Address: 145 Rue du général Leclerc, 95130 Franconville, France
South Africa Service Area: Republic of South Africa

Contact Information:

Website: https://www.jobbers.io
General Email: [email protected]
Privacy Email: [email protected]
Phone: +33 6 88 95 37 10 (French timezone: CET/CEST)

Information Officer:

Name: Driss LJAM BENNIS
Title: Information Officer / Privacy Contact
Address: 145 Rue du général Leclerc, 95130 Franconville, France
Email: [email protected]

South African Regulatory Authority:

You have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator of South Africa
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Postal Address: P.O Box 31533, Braamfontein, Johannesburg, 2017
Website: inforegulator.org.za
Email: [email protected]
Phone: +27 10 023 5200

Response Times:

General Inquiries: 24-48 hours
POPIA Rights Requests: 1 month (extendable to 3 months for complex requests)
Urgent Privacy Matters: 72 hours
Data Breach Notifications: Within 72 hours to Information Regulator (where required)