Privacy Notice (POPIA)

BadCompany is run by Zaiboon Gani, an individual in South Africa. Zaiboon Gani is the responsible party (data controller) for your personal information under the Protection of Personal Information Act (POPIA).

• Account details (name, email, login, account type) — to create and run your account. Basis: contract.
• Reviews and submissions — to moderate and publish them. Reviews are shown without your name. Basis: contract and legitimate interest.
• Talent pool profile (name, role, level, city, portfolio and LinkedIn links) — shown to recruiters only if you choose to be visible. Recruiters contact you through the site's chat; your email stays private. Basis: consent, which you can withdraw anytime.
• Messages between recruiters and designers — to deliver the chat. Basis: contract.
• Job postings from recruiters — to publish them. Basis: contract.
• Technical data (IP address, device, usage) — for security, fraud prevention and improving the site. Basis: legitimate interest.
• Support messages — to help you. Basis: legitimate interest.

• Service providers who host and run the site for us.
• Paddle, our Merchant of Record, for sales, subscriptions, payments, tax and invoicing.
• Recruiters, for talent pool profiles you've made visible.
• Professional advisers, and authorities where the law requires it.

Some providers store data outside South Africa. We only use providers with adequate protection, as POPIA requires.

We keep your data while your account is active. After you delete your account or it's no longer needed, we delete or anonymise it, unless the law requires us to keep it longer. Job postings are removed two months after posting unless extended.

You can ask to see, correct or delete your information, object to how we use it, or withdraw consent. Email our contact page and we'll reply within 30 days. You can also complain to the Information Regulator (inforegulator.org.za).

We use encryption, access controls and row-level permissions so people only see what they're allowed to. No system is perfect, but we take this seriously.

We only use essential cookies and browser storage to keep you signed in. We don't use advertising cookies.