Protection of Personal Information Act
What Ikhaya stores, and who can see it.
Ikhaya is run by DN Brokers PTY Ltd, a South African company. DN Brokers PTY Ltd is the responsible party (data controller) for the personal information described here. A household folder contains somebody's identity number, address and pay — that is personal information under POPIA, and you are the responsible party for your worker's information you enter.
What we keep
- Your email address and the details you enter about your household.
- The records you create about each worker: name, contact details, start date, hours, pay, leave, and the documents generated from them.
- The dates a record was created or changed — this is what makes an evidence pack useful.
Why we keep it
To produce the documents and calculations you ask for, and to keep them for the period the Basic Conditions of Employment Act requires an employer to retain records. We do not sell your information or use it to advertise other products.
Who can see it
You, and the people you share the folder with. Every record is tied to your account and access is checked on the server for each request — nobody can read your folder by guessing a link. We use hosting providers to store and back up the data; they process it for us and may not use it for anything else.
When you subscribe, our online reseller Paddle.com acts as Merchant of Record and processes your payment, subscription, tax and invoicing details for that purpose. We may also share information with professional advisers (legal, accounting) and with authorities where the law requires it.
Telling your worker
POPIA expects you to let the person know you are holding their information and why. A short sentence in the contract covers it: that you keep her details to pay her, to declare UIF and to keep the records the law requires.
How long we keep it
For as long as your account is active, and afterwards for the period the Basic Conditions of Employment Act requires an employer to retain records. When information is no longer needed it is deleted or anonymised. We protect it with appropriate technical and organisational measures, including encryption and access controls.
Your rights
Under POPIA you may ask what we hold about you, ask us to correct or delete it, and object to how we use it. You may also complain to the Information Regulator (inforegulator.org.za). We answer requests within one month.
Deleting it
Remove a worker or a document from inside the app at any time. To delete your whole account and everything in it, ask us and it goes, subject to any record we are legally required to retain. Export your folder first if you want a copy.
Questions about this page: reply to any email from us, or ask in the app. Related pages: terms & conditions · refunds.