Privacy Policy

We collect personal information only when you choose to submit it:

• Workforce plan requests — your name, company, role, work email, phone number, region, industry, workforce size, timeline and anything you write in the message field. So that we know which campaign or page brought you to us, the submission also records the page it was sent from and, where present, campaign tags from the link you followed.
• Insights subscription — your email address.
• Job applications — your name, email, phone number, an optional message, and the CV you attach. Please send only what the advert asks for.
• Direct contact — whatever you include when you email or phone our offices.

The TES Model Finder and the free calculators run in your browser. Your answers and figures are not collected or stored by us — they reach us only if you then choose to submit the contact form, where the recommended model is included so a consultant has context.

Like almost every website, our hosting infrastructure keeps standard technical server logs (IP address, browser type, pages requested) for security and reliability purposes.

• Responding to workforce plan requests — to contact you, scope your requirement and put a written plan in front of you. Lawful basis: steps taken at your request prior to entering a contract, and our legitimate interest in responding to a business enquiry you initiated.
• Operator briefings (subscription) — to send you the insights you signed up for. Lawful basis: your consent, which you can withdraw by unsubscribing at any time. We do not add form submitters to the briefing list — subscribing is its own, separate action.
• Recruitment — to assess your application and contact you about placement. Lawful basis: your consent, given by the checkbox on the application form, and steps prior to an employment contract.
• Security and abuse prevention — server logs and anti-spam measures. Lawful basis: our legitimate interest in keeping the site and its users safe.

We do not use your information for automated decision-making with legal effect, and we do not sell or rent personal information to anyone.

Form submissions are delivered to our monitored mailbox (info@riseupgroup.co.za) and handled by RiseUp's own consultants — not a call centre and not a purchased mailing list. CVs are stored in an access-controlled location that is not publicly reachable, and can be retrieved only by authorised RiseUp staff through a password-protected administration area.

Where we connect a customer-relationship or automation system to the lead process, submissions may also flow into that system so enquiries are tracked and answered. Any such system acts as our operator under POPIA and processes information only on our instructions.

We use a small number of service providers to run this website — website hosting, email delivery and (where enabled) CRM or automation tooling. They process personal information on our behalf as operators under sections 20 and 21 of POPIA, under confidentiality and security obligations.

Some of this infrastructure is operated from outside South Africa. Where personal information is transferred across borders, we do so under section 72 of POPIA — to recipients bound by obligations that provide a substantially similar level of protection.

We disclose personal information beyond that only where the law requires it or where you ask us to.

• Business enquiries — kept for up to 24 months after our last contact with you, then deleted, unless the enquiry becomes an engagement (in which case contract records apply).
• Subscriptions — kept until you unsubscribe.
• Job applications and CVs — kept for up to 12 months from submission so we can place from our pools, then deleted, unless you are placed (employment records are then kept for the periods labour and tax legislation prescribes) or you ask us to delete them sooner.

The site is served exclusively over encrypted connections (HTTPS), with security headers that restrict what can load and where the site can be embedded. Uploaded CVs are stored under randomised names outside the web root and are validated on receipt. Access to submitted information is limited to the RiseUp staff who need it to respond to you. Should a compromise of personal information ever occur, we will notify the Information Regulator and affected data subjects as section 22 of POPIA requires.

We measure how this website is used so we can improve it and so our marketing works. That measurement has three layers:

• Aggregate analytics — anonymous, cookieless counting of visits, pages and referrers, built into our hosting platform.
• Google Analytics — usage analytics that set cookies to distinguish visitors and sessions, including which pages, tools and forms are used. We use this to understand and improve the site.
• Advertising and campaign tags — when we run paid campaigns (for example on Google, Meta or LinkedIn), their measurement tags may set cookies to attribute visits and enquiries to campaigns and, where enabled, to show relevant follow-up advertising (remarketing).

None of this identifies you by name, and none of it applies to what you type into our forms — form submissions are handled only as sections 1–5 describe, and are never sold or shared with advertising platforms as personal records. You can limit cookies in your browser settings at any time, and manage ad personalisation through your Google and social-media account settings. The site also carries a strictly necessary authentication cookie used only by RiseUp staff signing into the content administration area.

You may at any time:

• ask whether we hold personal information about you, and request a copy (access);
• ask us to correct or complete it (correction);
• ask us to delete it, where we are not required by law to keep it (deletion);
• object to processing based on legitimate interest (objection);
• withdraw consent you have given — including unsubscribing from briefings; and
• complain to the Information Regulator.

To exercise any of these, contact our Information Officer using the details below. We will respond within a reasonable time and, for access requests, within the periods PAIA prescribes — see the PAIA Manual.

We do not send unsolicited electronic marketing. The insights briefing goes only to people who subscribed, roughly monthly, and every send includes a working unsubscribe. In line with section 69 of POPIA, we will not market to you by electronic means without your consent or an existing customer relationship.

This website is directed at businesses and work-seekers of legal working age. We do not knowingly collect personal information from children; if you believe a child's information has reached us, contact us and we will delete it.

When this policy changes, the updated version is published here with a new “last updated” date. Material changes to how we process existing information will be communicated to affected data subjects.