Privacy Policy.
Last updated 23 July 2026.
This document has been reviewed and approved by NXT GEN Foundation's legal counsel.
1. Introduction
This Privacy Policy explains what personal information NXT GEN Foundation NPC collects through this website, why we collect it, who can access it, and your rights regarding it, in line with South Africa's Protection of Personal Information Act (POPIA).
2. Information We Collect From Candidates
When you register, we collect: your full name, email address, and phone number; your general area/location (one of a small list of named areas — never your exact street address); your skills and work experience (free text); your highest education level; your availability to start work; whether you hold a driver's license and have access to transport; your work eligibility status; and the documents you upload — a CV and ID document (both required), and optionally one or more qualification certificates and a driver's license copy.
3. Special Personal Information (Disability)
We ask an explicitly optional question about disability status, intended to help us provide appropriate support and matching — never to screen or disqualify anyone. This information is visible only to NXT GEN staff, is never shown publicly, and is never shared with companies.
4. Information We Collect From Companies
When a company submits a hiring request, we collect the company's name, a contact person's name, email and phone number, and a description of the role and skills they're looking for. This information is used only to facilitate matching with candidates and is never made public beyond the company's name and logo, which they may choose to have featured on our public impact map once a successful placement has been made.
5. How We Use Your Information
We use candidate information to review and assess applications, to match approved candidates with companies seeking talent, and to communicate with you about your application status. We use company information to identify suitable candidates and facilitate an introduction.
6. Who Has Access to Your Information
Candidates can see and edit only their own profile. NXT GEN staff have access to all candidate and company records in order to review applications and facilitate matches. Companies never have direct access to candidate records — all matching is carried out by staff. Members of the public can only see an aggregate count of approved candidates per general area on our public impact map — never any individual's name or details. Where a candidate has been placed with a featured hiring partner, the public may see that company's total number of successful placements, but never which specific individuals were involved.
7. Where Your Information Is Stored
Your information is stored in a hosted database and file storage system provided by Supabase. The website itself is hosted by Vercel.
8. Third Parties We Work With
We use the following service providers to operate this website: Supabase (database, authentication, and file storage), Brevo (sending account-related emails, such as confirming your email address), and OpenStreetMap's Nominatim service (used internally by staff to search locations on our map — this does not involve sharing any candidate information). Where online donations are enabled, a payment provider processes those transactions separately from candidate data.
9. Document Security
Uploaded documents (your CV, ID, certificates, and driver's license) are stored in access-controlled file storage, never at a publicly accessible web address. When you or staff need to view a document, a temporary, single-use link is generated on demand and expires shortly after.
10. How Long We Keep Your Information
If your application is rejected, or your profile becomes inactive, we keep your information and documents for 6 to 12 months from that point before deleting them. If you're approved and remain active in our matching pipeline, we retain your information for as long as that remains the case. You can request earlier deletion at any time — see "Your Rights" below.
11. Your Rights
Under POPIA, you have the right to access the personal information we hold about you, request that we correct it, and request that we delete it. To request deletion, contact us using the details below — we're able to permanently remove your profile, documents, and account entirely. Can be sent to legal@nxtgenfoundation.org
12. Cookies
This website uses a single essential cookie to keep you securely logged in. We do not use advertising or marketing tracking cookies.
13. Children
This service is intended for individuals aged 18 and older. We do not knowingly collect personal information from anyone under 18, and this service is not directed at or designed for use by children. If we become aware that we've inadvertently collected information from someone under 18, we'll take reasonable steps to delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Where we make a material change, we will update the effective date above.
15. Contact Us
Questions about this Privacy Policy, or requests to access, correct, or delete your information, can be sent to info@nxtgenfoundation.org.