Last updated: 15 May 2026
Bruton IT Solutions (Pty) Ltd, trading as Home Workers, is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy describes how we collect, use, share, and protect personal information in accordance with the Protection of Personal Information Act, Act 4 of 2013 (POPIA) and other applicable South African legislation.
By using our Platform you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
The Responsible Party (as defined in POPIA) is:
2. Information Officer
In accordance with POPIA, we have designated an Information Officer who is responsible for ensuring that the Platform complies with its obligations under the Act.
All requests relating to your personal information, including access, correction, and deletion requests, should be directed to the Information Officer.
3. Personal Information We Collect
We collect personal information in two categories:
Employer (User) Information
- Full name, email address, and contact number
- Residential address
- South African ID number or passport number
- Billing and payment information
- Account login credentials (passwords are stored in hashed form and are never visible to us)
Domestic Worker Information
- Full name, ID or passport number, and date of birth
- Contact details and residential address
- Employment details: start date, job description, working hours, and agreed wage
- Payment records: amounts paid, leave taken, and public holidays
- COIDA registration details and UIF reference numbers
Technical and Usage Information
- IP address, browser type, and device information
- Pages visited and features used on the Platform
- Date and time of access
4. How We Collect Personal Information
We collect personal information:
- Directly from you when you register an account, complete your profile, or enter worker details.
- Automatically through cookies and similar technologies when you use the Platform.
- Via our contact form when you send us an enquiry.
5. Purpose of Processing
We process personal information for the following purposes:
- To provide and maintain the Platform and its Services.
- To generate legally compliant employment contracts and COIDA-related documents.
- To calculate payment records, leave entitlements, and annual returns.
- To send service-related notifications, including compliance deadline reminders.
- To process subscription payments and manage your account.
- To respond to your queries and provide customer support.
- To improve the Platform and our Services through anonymised usage analytics.
- To comply with our legal obligations under South African law.
6. Lawful Basis for Processing (POPIA Section 11)
We process your personal information on the following lawful grounds:
- Contractual necessity: Processing is required to perform the contract between you and us (i.e., to deliver the Services you have subscribed to).
- Legal obligation: Processing is required to comply with South African laws applicable to the Platform and its Services.
- Legitimate interest: Processing for platform security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
- Consent: Where we send direct marketing communications, we do so only where you have opted in. You may withdraw consent at any time.
7. Sharing of Personal Information
We do not sell your personal information. We may share it only in the following limited circumstances:
- Service Providers: We use trusted third-party providers to operate the Platform, including cloud hosting (AWS S3), email delivery (Mailgun), and payment processing. These providers are contractually bound to process your data only on our instructions and in accordance with POPIA.
- Government Authorities: We may disclose personal information to the Department of Employment and Labour, the Compensation Fund, or SARS where required by law or where you have specifically requested us to assist with a submission on your behalf.
- Legal Proceedings: We may disclose information where required by a court order or applicable law.
8. Cross-Border Transfers
Some of our service providers operate outside South Africa. Where personal information is transferred across borders (for example, to cloud infrastructure in AWS regions), we ensure that adequate safeguards are in place as required by POPIA Section 72, including binding contractual obligations that afford a comparable level of protection.
9. Retention of Personal Information
We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:
- Employment and payment records are retained for a minimum of 5 years from the date of the last transaction, in accordance with the BCEA and COIDA record-keeping requirements.
- Account information is retained for the duration of your subscription and for 12 months thereafter, unless you request earlier deletion.
- Contact form enquiries are retained for 24 months.
When personal information is no longer required, it is securely deleted or anonymised.
10. Security of Personal Information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or disclosure. These measures include:
- Encrypted data transmission using HTTPS/TLS.
- Password hashing using industry-standard algorithms.
- Secure cloud storage with restricted access controls.
- Session management controls and automatic timeout.
- Regular security reviews of the Platform.
In the event of a data breach that is likely to harm you, we will notify you and the Information Regulator as required by POPIA Section 22.
11. Your Rights Under POPIA
As a data subject under POPIA, you have the following rights:
- Right of Access (Section 23): You may request a copy of the personal information we hold about you.
- Right to Correction (Section 24): You may request that we correct or update inaccurate or incomplete personal information.
- Right to Deletion: You may request deletion of your personal information where we no longer have a lawful basis to retain it, subject to our legal record-keeping obligations.
- Right to Object (Section 11(3)): You may object to the processing of your personal information for direct marketing purposes at any time.
- Right to Complain: You have the right to lodge a complaint with the Information Regulator if you believe your personal information rights have been violated.
To exercise any of these rights, please contact our Information Officer at info@homeworkers.co.za. We will respond within a reasonable period and in accordance with POPIA.
12. Cookies
The Platform uses cookies to maintain your session and improve your experience. We use the following types of cookies:
- Session cookies: Required for the Platform to function. These are deleted when you close your browser.
- Analytics cookies: We use Google Analytics to understand how the Platform is used. Data is anonymised and aggregated.
- reCAPTCHA: Google reCAPTCHA is used to protect forms from abuse. This is subject to Google's privacy policy.
You can disable cookies in your browser settings; however, doing so may affect the functionality of the Platform.
13. Direct Marketing
We may send you service-related communications (such as compliance deadline reminders and account notices) without requiring your separate consent, as these form part of the Service you have contracted for.
We will only send you promotional or marketing communications where you have opted in. You may opt out at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@homeworkers.co.za.
14. Children
The Platform is intended for use by adults (18 years and older). We do not knowingly collect personal information from persons under the age of 18. If you believe that a minor has submitted personal information to us, please contact us immediately and we will take steps to delete it.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes.
16. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or our handling of your personal information, please contact our Information Officer:
17. Complaints to the Information Regulator
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the South African Information Regulator: