Privacy Policy

This draft explains how information is handled when you use the Molale Security website. It is intended to be read with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law. Please contact us if you have a question or request about your personal information.

Who is responsible for your information?

Molale Security Group is the responsible party for personal information submitted through this website. Our published contact details are info@molalesecurity.com, +27 18 477 1412, and No 15 Third Avenue, Vaal Reefs, Orkney. Please address privacy requests to the email above for the attention of the Information Officer.

Careers applications

When you submit a CV, the form asks for your full name, email address, contact number and CV file. The website uses these details to receive and consider your application for recruitment opportunities. The upload code does not save the application fields or CV in the website database. It sends the CV file to the Google Drive folder configured for recruitment. The applicant name is included in the uploaded file name; the email address and phone number are not included in that file name.

The website server processes the form and file to validate the submission and send the CV to Google Drive. Google processes the file as the Drive service provider. The upload route also requests an access token from Google’s OAuth service. The site’s hosting and serverless-function provider processes requests to display the website and handle the upload; the deployed host is Vercel.

Other website interactions

The website also has a training application flow. It asks for a name and phone number, verifies the phone number through SMSPortal, records application information in the configured application database, and sends a WhatsApp message through Twilio. The application endpoint can store course, name, email if supplied, phone, notes if supplied, status and creation time. The current training form sends the name, phone and selected course. The database provider and its retention settings should be confirmed by Molale Security.

The contact inquiry form currently collects name, phone number, optional email, selected service and message in the browser. The code logs these form values to the browser console and displays a confirmation alert; it does not currently send the inquiry to a website API or save it through the application. Do not submit sensitive information through that form.

Cookies, analytics and technical logs

A review of the website source found no analytics, advertising pixels or application code that sets cookies or uses browser local storage for tracking. The site uses browser-side navigation and a page progress indicator. External map tiles, a decorative texture image and links to WhatsApp are also present; those providers may receive technical connection information when their content is loaded or their links are used. We have not established the hosting, database or external providers’ log contents or retention periods. The hosting provider or browser may process technical information such as IP address, request details and device/browser data as part of operating the site.

Access, sharing and security

Personal information is made available to service providers involved in the relevant website function, including Google Drive for CV uploads, Vercel for website hosting, and SMSPortal, the application database provider and Twilio for the training application flow. Access to a CV in Drive follows the permissions on the configured recruitment folder. The website code does not establish which people have access to that folder; Molale Security should confirm and limit access to people who need it for recruitment.

The upload route validates supported file types, checks file content and enforces a 4 MB file limit. It keeps OAuth credentials in server environment variables and its application logs do not intentionally include applicant form values or CV contents. These code-level measures do not establish all safeguards used by the hosting or service providers. No claim is made here about encryption, provider retention, or deletion practices that have not been confirmed.

Retention

The Careers page says CVs are kept on file for suitable opportunities and asks applicants to consent to retention for recruitment consideration. The upload code does not set a retention period or automatically delete CVs. Training application records are stored in the configured database; the code does not define a deletion schedule. Molale Security should confirm retention periods and operational deletion procedures. You may contact us to request deletion or ask how long information is being retained.

Your rights

Subject to applicable law, you may ask to access or correct personal information, object to or request restriction of certain processing, or request deletion. You may also raise a concern with the Information Regulator of South Africa. We may need to verify your identity and consider legal obligations or other lawful grounds before responding. Contact info@molalesecurity.com for a privacy request.

Changes and questions

We may update this policy when website practices or legal requirements change. The version published on this page applies from its publication date. For privacy questions, contact Molale Security using the details above.