Privacy notice

Last updated: 13 October 2026

This notice explains how Imbertech (Pty) Ltd handles personal information on remotejobs.co.za, under the Protection of Personal Information Act (POPIA). We are the responsible party.

Who to contact

Our Information Officer is Sybrand de Kock. Reach the Information Officer at privacy@remotejobs.co.za. Registered address: 90 Rivonia Road, Second Floor North, Sandhurst, Sandton, 2196.

People who only browse

You can read the site without an account. We do not ask who you are and we set no cookie for you.

What we hold, and why

• Employer account email, in lower case. To let you sign in, to send you sign-in links, and to tell you about your adverts.
• Hashes of sign-in links and sessions. To check a link or session is genuine without keeping the link itself.
• A salted hash of your IP address. To apply rate limits and to stop one person reporting an advert many times. We do not keep the IP address itself for this.
• Wrong-location reports on listings: a salted hash of your IP address, the reason you pick and the optional note you write. To count how many people say a listing is wrong. We delete each report 400 days after you send it, or sooner if the listing is deleted.
• The advert content an employer writes: company name, description, apply email or link. To show the advert.
• Order records from Lemon Squeezy: order id, amounts, the email used at checkout, and status. We use them to apply days to an advert and to refund correctly. We also keep them as financial records.
• A salted hash of the email on a fraud block. To keep a blocked account from coming straight back.

Payment card details never reach us. Lemon Squeezy is the merchant of record and processes the payment.

Listings from public feeds

Scraped listings describe jobs. They come from public job feeds, are credited to the source and link to the original. A company that wants its listings removed can write to bot@remotejobs.co.za.

Who processes it, and where

• Amazon Web Services: database and email sending, in the af-south-1 (Cape Town) region. Data at rest stays in South Africa.
• Vercel: hosting. Functions run in Cape Town. The company is in the United States.
• Cloudflare: DNS, email forwarding and the Turnstile bot check. The company is in the United States.
• Lemon Squeezy: payments, as merchant of record. The company is in the United States.

Sending information outside South Africa

Vercel, Cloudflare and Lemon Squeezy are in the United States, so some information leaves South Africa: request data passing through Vercel and Cloudflare, and checkout details held by Lemon Squeezy. POPIA section 72 allows this when the receiver is bound by a contract or rules that give similar protection, or when the transfer is needed to carry out a contract with you. We rely on the data processing terms these providers offer, and on the need to deliver the service and take payment that you asked for. We do not sell personal information.

How long we keep it

• Order records and the checkout email: 5 years, as financial records.
• Sign-in links: they expire after 15 minutes.
• Sessions: 30 days.
• Deleted accounts: the account is kept as an empty record, sign-in links are purged, adverts are taken down, and their company name, apply email and description are erased.
• A fraud block: kept as a salted hash of the email.

Your rights

• See the personal information we hold about you.
• Ask us to correct it.
• Ask us to delete it. Write to us by email.
• Object to how we use it.
• Complain to the Information Regulator (South Africa). Its contact details are on its website, https://inforegulator.org.za.

Write to privacy@remotejobs.co.za. We may need to confirm it is you. Some records, such as orders, must be kept for the period above even after you ask for deletion.

Security

Connections are encrypted, and we keep hashes instead of raw values where we can. No system is perfectly safe. If a breach affects you, we will tell you and the Information Regulator as POPIA requires.

Cookies

See the cookies page.