Privacy Policy
Last updated: 15 July 2026
Ensigio is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) and applicable data protection regulations.
1. Information We Collect
We collect information you provide directly, including your name, email address, cellphone number, and ID number when you create an account. We also collect candidate assessment data, qualification records, and usage analytics when you use the platform.
2. How We Use Your Information
Your information is used to provide and improve our services, verify qualifications, generate assessment reports, facilitate recruitment decisions, and comply with legal obligations under South African data protection laws (POPIA).
3. Data Security
We implement industry-standard security measures including encryption in transit and at rest, role-based access controls, and regular security audits. Authentication is required for all data access, and sessions are managed with secure token-based protocols.
4. Data Sharing
We do not sell your personal information. Assessment results and reports may be shared with authorised recruiters and hiring managers within your organisation. Aggregate, anonymised data may be used for platform analytics and bias detection.
5. Your Rights
You have the right to access, correct, or delete your personal information, withdraw consent for data processing, and object to automated decision-making. Contact us to exercise these rights.
6. Data Retention
We retain personal information for as long as necessary to provide our services and comply with legal obligations. Candidate assessment data is retained per your organisation’s retention policy, with a default of 24 months.
7. Cookies & Tracking
We use essential cookies to maintain authentication sessions and platform functionality. We do not use advertising cookies or sell tracking data to third parties.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or in-platform notification. Continued use of the platform constitutes acceptance of the updated policy.