What we hold about you, and why.

What we collect

Account: your name, email, hashed password, and whether you enabled two-factor authentication.

Documents: none. NexRecruit is a registered private employment agency, certificate PEA 7001756/4, but until the doors open we do not collect CVs, identity documents or any other file, and the upload endpoints are switched off. When we open, this section will cover your CV, LinkedIn screenshot and any supporting documents you choose to add.

Usage: minimal server logs (time, path, error) to keep the service running and safe.

Why we hold it

Today: to tell you when NexRecruit opens, and for nothing else. We hold an email address and an optional first name. We do not profile you, we do not match you to anything, and we do not share you with any employer until the doors open.

When we open: this section will also cover building the profile you choose to create, matching you to verified employers once you switch your visibility on, and verifying identity during hiring. None of that is happening yet, and we will not start it quietly.

Legal basis

Today: your explicit consent, given by ticking the unticked box on the pre-registration form (POPIA s11(1)(a)), to be emailed when we open. You can withdraw it at any time using the unsubscribe link in any email we send, and withdrawal is immediate.

When we open: your explicit consent at signup for processing a CV and any supporting documents you choose to upload, and legitimate interest for basic account and security operations.

Who sees your profile

Today nobody outside NexBDM sees anything, because all we hold is an email address and an optional name. We never sell your data to anyone. When we open, only verified companies will see a profile, only while you switch it on, and no company will ever receive your documents automatically: each shortlist will be curated and consented.

Learning partner (NexAcademy)

If you use the free learning area, we share your name, email and optionally your WhatsApp number with NexAcademy, the training platform that runs the 60-day journey. NexAcademy processes this as our operator under POPIA, holds your learning progress (lessons, points, streaks, certificates), and may not use it for anything else. A signed operator agreement governs this. If you never open the learning area, nothing is shared.

Retention

We keep your profile for as long as you want it live. Ask us to delete it and it goes, documents included, within 7 business days. Inactive profiles are archived and then purged on a rolling schedule.

Your rights

You can ask us to show you what we hold, correct it, delete it, or stop marketing. Email hjr@nexbdm.com. If we do not resolve it, you may complain to the Information Regulator at inforegulator.org.za.

Marketing

We only send you launch news or platform updates if you ticked the optional marketing box. Every message has an unsubscribe link. We never use your CV content for marketing.

Where your data lives

The platform and its database run on servers we control in Europe, and backups stay within that same infrastructure.

Email and marketing leave the country. We send email through Resend and manage our mailing list in HighLevel (GHL), both providers in the United States, so your email address and the content of our messages to you are processed there. Two other services may hold limited personal information outside South Africa: our hosting provider, and NexAcademy if you choose to use the learning area.

POPIA section 72 allows this where the recipient is bound by rules that give substantially similar protection, or where you consent. We rely on our contracts with these providers. If you would rather we did not send you email at all, tell us and we will remove you from the list entirely.

Who is responsible

Responsible party: NexBDM (Pty) Ltd, registration number K2026250171, trading as NexRecruit.

Address: 140 Griffiths Road, 37 Montery Place, Pretoria, Gauteng, 0184, South Africa.

Information Officer: Heinoux Roux, Director and Information Officer. Reach them at hjr@nexbdm.com or +27 79 607 5372. Please give us a chance to fix something before you escalate, though nothing here takes away your right to go straight to the Regulator.

Our manual under the Promotion of Access to Information Act is at PAIA manual.

Right to object

You may object at any time, on reasonable grounds, to us processing your personal information, and you may object to direct marketing outright without giving a reason (POPIA s11(3) and s69). Objecting is free, it takes one email, and we stop. It is not the same as unsubscribing from one mailing list: an objection covers all direct marketing from us.

If something goes wrong

If personal information under our control is accessed or acquired by someone who should not have it, we will notify the Information Regulator and every affected person as soon as reasonably possible after establishing what happened (POPIA s22). We will tell you what was involved, what we believe the consequences are, and what we are doing about it. We will not stay quiet to protect our own embarrassment.

Contact

Questions or concerns: hjr@nexbdm.com, or +27 79 607 5372.