1. Who we are
GP Consult SA ("we", "us") is the responsible party for the personal information described in this notice, as that term is used in the Protection of Personal Information Act, 4 of 2013 ("POPIA").
- Address: Boardwalk Lakeside Office Park, Units A1 & A2, Faerie Glen, Pretoria, South Africa
- Telephone: +27 12 111 0302
- Website: www.gpconsult.co.za
- Information Officer: The head of GP Consult SA acts as our Information Officer and can be contacted at marketing@gpgroupsa.co.za.
- Registered name: GP Consult SA, part of the GP Group SA.
2. What we collect
There are two forms on this site, and they collect different things.
If you are an employer, using the enquiry form
We collect only what you type into it:
| Information | Required? | Where it comes from |
|---|---|---|
| Your name | Required | You type it into the form |
| Your email address | Required | You type it into the form |
| Your telephone number | Optional | You type it into the form |
| What you are enquiring about | Optional | You select it from the form |
| Your message | Optional | You type it into the form |
If you are a candidate, using the application form
Our application form is in five steps. Only the first step is required. You can stop after it and we will still have your CV and be able to contact you. Everything after it helps us place you, and most of it is optional.
| Information | Required? | Where it comes from |
|---|---|---|
| Your first name and surname | Required | You type it into the form |
| Your email address and mobile number | Required | You type it into the form |
| The discipline you work in, and the areas you would work in | Required | You choose them from the form |
| Your CV | Required | You attach it (PDF, Word or RTF, up to 5 MB) |
| Your nationality, and whether you may work in South Africa | Required | You choose them from the form |
| Your ID number | Optional | You type it in, if you choose to |
| Your employment equity category, gender, and whether you have a disability | Optional | You choose them, if you choose to |
| Your current or most recent job, and your previous roles | Required | You type it into the form |
| Your notice period and current salary band | Optional | You choose them, if you choose to |
| Qualification certificates, trade tests or licences, and a copy of your ID | Optional | You attach them, if you choose to |
We do not ask what salary you expect. We do not ask about criminal records.
Employment equity information — please read this part
Your employment equity category — what POPIA calls information about your race or ethnic origin — is special personal information under section 26 of POPIA. We may only process it for reasons the law specifically allows.
Our reason is section 27 read with section 29: we process it to comply with the Employment Equity Act, because employers we place you with carry employment equity obligations and report on the people they engage. We use it for that, and for nothing else.
It is entirely optional. You may leave it blank or choose “prefer not to say”. Whether you answer, and however you answer, has no effect on whether we represent you or put you forward for a role. The same applies to your gender and to whether you have a disability.
Your CV is likely to contain further personal information — such as your employment history, qualifications, and any identifying details you have chosen to include in it. We only receive what you send us. Please do not include information we do not need, such as your banking details.
We may ask for your ID number where we genuinely need it — for example to verify a qualification or a trade certificate with the body that issued it, or to place you with a client who requires it. Where we do, we will say so at the point we ask, it will always be optional, and declining will never affect whether we represent you or put you forward for a role.
We do not buy personal information about you from third parties, and we do not build a profile of you from other sources.
3. Why we collect it, and on what basis
We process this information to respond to your enquiry and, if you are a candidate, to consider you for current and upcoming roles and to represent you to our clients.
Our lawful basis under POPIA is your consent, which you give by ticking the consent box before submitting the form. You are not obliged to give it. If you would rather not, you can contact us directly by telephone or email instead — the details are in section 9.
You may withdraw your consent at any time (see section 7). Withdrawing it does not make our processing before that point unlawful, but we will stop processing your information and delete it on request.
4. Where it is stored
We use third-party service providers ("operators" under POPIA) to receive and store what you send us:
- Supabase — if you attach a CV, the file is uploaded to a private storage bucket. It is not publicly listable or browsable. Your enquiry details are also recorded in GP Consult's internal workforce platform database so our recruitment team can act on them.
- EmailJS — used to send your enquiry to our recruitment team and to send you a confirmation email. Candidate applications and CVs go to CV@GPConsult.co.za and marketing@gpgroupsa.co.za; other enquiries go to marketing@gpgroupsa.co.za, Gerhard@GPConsult.co.za and Gerhard@GPGroupSA.co.za.
Your CV, and any certificates or documents you send us, reach our recruitment team as email attachments, and a copy is kept in the private storage bucket described above, subject to section 6.
This is why we cap file sizes: your CV is limited to 5 MB, and supporting documents to 7 MB in total, so that we can email them to the team who will actually read them. If your documents come to more than that, the form tells you at the time and asks you to email them to CV@GPConsult.co.za quoting your reference — nothing is silently dropped, and nothing is left somewhere we cannot get to it.
Cross-border transfer: these providers may store or process your information on servers outside South Africa. POPIA permits this where the recipient is subject to protection comparable to POPIA. Our agreements with these operators require them to protect your information to that standard.
6. How long we keep it
We keep your details for 12 months from your last contact with us. Applying, sending us your CV, replying to us, or speaking to us about a role all reset the 12 months.
At the end of that period we delete your information — your CV, your application, and any documents you sent us — unless you have asked us to keep it for longer. We will normally ask you first, so that you can stay on our books without having to start again.
You can ask us to delete your information sooner, at any time, and we will do so unless the law requires us to keep it. Email CV@GPConsult.co.za and quote your application reference — it looks like GPC-20260715-A7K2M9, it is in the email we sent when you applied, and it lets us find everything of yours at once.
7. Your rights
Under POPIA you have the right to:
- Be told what personal information we hold about you.
- Ask for a copy of it. We may charge a prescribed fee for this.
- Correct or update anything that is inaccurate, irrelevant, misleading, or out of date.
- Have it deleted or destroyed, where we no longer have a lawful reason to keep it.
- Object to our processing of it.
- Withdraw your consent at any time, which we will treat as a request to stop processing and delete.
- Complain to the Information Regulator if you believe we have handled your information unlawfully.
To exercise any of these, contact us using the details in section 9. We will respond within a reasonable period.
The Information Regulator (South Africa)
- Website: inforegulator.org.za
- Complaints email: POPIAComplaints@inforegulator.org.za
8. Security
Your CV is uploaded to a private storage bucket rather than a public folder. The bucket is not publicly readable or listable: the website's public key can add a file to it but cannot read anything back out of it, so no CV can be retrieved from the website. The website is served over HTTPS. Our internal workforce platform restricts access to approved staff accounts.
No system is perfectly secure. If a breach occurs that is likely to harm you, POPIA requires us to notify you and the Information Regulator, and we will.
9. Contact us
To ask a question about this notice, request your information, or ask us to delete it:
- Email: marketing@gpgroupsa.co.za
- Telephone: +27 12 111 0302
- Post: Boardwalk Lakeside Office Park, Units A1 & A2, Faerie Glen, Pretoria