1. Who is responsible for your information?
Lannie Khalanga (Pty) Ltd, trading as LERRA, is responsible for personal information processed through LERRA's website, recruitment services and secure platform, except where another party is independently responsible for information under applicable law.
2. What information we collect
The information LERRA processes depends on how you interact with us. It may include:
- contact information such as your name, email address, telephone number and organisation;
- candidate profile information, employment history, education, skills, qualifications, location and other recruitment-related information;
- CVs, identification documents, qualifications, certificates and other documents you choose or are required to provide;
- vacancy, application, screening, interview, offer and placement information;
- employer and client information, contacts, vacancy requirements, feedback, billing and shared documents;
- account, authentication, session and security information needed to operate the secure platform;
- communications and enquiries you send to LERRA; and
- technical and audit information used to secure, troubleshoot and operate the platform.
3. Why we use personal information
LERRA uses personal information to provide recruitment and workforce services; assess and manage candidate applications; match candidates to suitable opportunities; communicate with candidates and employers; manage interviews, offers and placements; administer client relationships and billing; maintain secure accounts; respond to enquiries; meet legal or regulatory obligations; and protect the integrity of the platform.
4. Lawful processing and consent
LERRA processes personal information only where there is a lawful reason to do so under the Protection of Personal Information Act, 2013 (POPIA) and other applicable law. Depending on the context, this may include steps requested before entering into an agreement, performing an agreement, complying with a legal obligation, protecting legitimate interests, or processing based on consent where consent is required.
Candidate registration and recruitment workflows may ask for explicit consent where appropriate. You may withdraw consent where processing depends on consent, although this may affect LERRA's ability to continue a service that requires that information.
5. Recruitment information and prospective employers
LERRA does not make every candidate profile visible to every employer. Candidate information is shared with a prospective employer when it is relevant to a recruitment process and LERRA deliberately submits or otherwise makes the candidate available for that opportunity, subject to the applicable recruitment process and permissions.
6. Special or sensitive information
Recruitment documents may contain identity information or other information that requires heightened care. LERRA limits access to such information according to role, purpose and platform permissions and processes it only where necessary and lawful.
7. Service providers and other recipients
LERRA may use trusted service providers for hosting, email delivery, storage, security, document processing or other technical services. Information may also be shared with professional advisers, regulators, law-enforcement bodies or other parties where required or permitted by law.
Where a provider processes information outside South Africa, LERRA will take reasonable steps to use arrangements and safeguards appropriate to the transfer and the nature of the information.
8. How long we keep information
LERRA retains personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business and recruitment records, to resolve disputes, or to meet legal, contractual or regulatory requirements. Retention periods may differ by record type.
9. Security
LERRA uses administrative and technical safeguards designed to protect personal information, including authenticated workspaces, role-based access, private document storage, audit records and encrypted connections. No digital service can guarantee absolute security, but LERRA aims to apply safeguards proportionate to the information and risk involved.
10. Your rights
Subject to POPIA and applicable law, you may request access to personal information held about you; ask for inaccurate or incomplete information to be corrected; object to certain processing; request deletion or destruction where LERRA is no longer authorised to retain the information; or raise a complaint about how your information is handled.
11. Cookies and local browser storage
The secure platform uses essential session technology to keep authorised users signed in and to protect account access. Some forms may also use browser session storage to preserve information temporarily during an active browser session. See the Cookie Notice for more detail.
12. Changes to this notice
LERRA may update this notice as services, providers, legal requirements or platform functionality change. The latest version published on this website applies from the date shown above.
