AFRIVIO PRIVACY NOTICE

Effective date: 23 September 2026
Last updated: 23 September 2026

1. Introduction

Afrivio respects your privacy and is committed to processing personal information lawfully, fairly, transparently and securely.

This Privacy Notice explains:

• What information Afrivio collects;

• Why the information is collected;

• How it is used;

• Who may receive it;

• How it is protected;

• How long it may be retained; and

• What rights you have.

Afrivio is operated by KTZ Holdings (Pty) Ltd, registration number 2021/614249/07.

For purposes of applicable data-protection law, KTZ Holdings (Pty) Ltd is the responsible party for personal information processed through Afrivio, except where another organisation independently determines how and why it processes information.

2. Contact details

Responsible party: KTZ Holdings (Pty) Ltd
Trading name: Afrivio
Registration number: 2021/614249/07
Privacy email: privacy@afrivioapp.com
General support: support@afrivioapp.com
Website: https://afrivioapp.com

3. Who this Notice applies to

This Notice applies to:

• Workers;

• Students and graduates;

• Employer representatives;

• Training-provider representatives;

• Occupational medical-provider representatives;

• Partners;

• Website visitors; and

• Other people who interact with Afrivio.

4. Information we collect

Depending on how you use Afrivio, we may collect the following categories of personal information.

4.1 Account information

• Name and surname;

• Email address;

• Telephone number;

• Login credentials;

• Account type;

• Communication preferences; and

• Account security information.

4.2 Worker and emerging-talent information

• Profile photograph;

• Date of birth or age confirmation;

• General residential location;

• Preferred work locations;

• Travel and relocation preferences;

• Availability;

• Employment preferences;

• Skills;

• Qualifications;

• Trade, profession or occupation;

• Work history;

• Academic information;

• Career interests;

• Learnership, internship, apprenticeship or Work Integrated Learning preferences; and

• Other profile information voluntarily supplied.

4.3 Documents and credentials

• Qualifications;

• Certificates;

• Licences;

• Professional registrations;

• Trade documentation;

• Identification documentation where required;

• Employment-related records;

• Submitted-document status;

• Verification status where applicable; and

• Expiry dates.

A document marked “submitted” has not necessarily been independently verified.

4.4 AI-guided video interview information

Afrivio may collect and process:

• Video recordings;

• Audio recordings;

• The worker’s image and voice;

• Interview questions;

• Interview answers;

• Recording timestamps;

• Technical recording information; and

• Consent records.

Every applicable worker, student or graduate completes five questions related to their selected qualification, field of study, trade, industry or skill.

Each answer is limited to one minute.

The recorded interview forms part of the profile and may be made available to authorised potential employers after the user provides separate consent.

4.5 Location information

Afrivio may process:

• General residential location;

• Preferred work areas;

• Project location;

• Distance from a project;

• Selected travel radius; and

• Willingness to travel or relocate.

Afrivio should not collect precise continuous device location unless the user is clearly informed and the feature requires it.

4.6 Project and recruitment information

• Project details;

• Required roles and headcounts;

• Skills and experience requirements;

• Candidate matches;

• Shortlists;

• Profile views;

• Invitations;

• Accepted or declined invitations;

• Team membership;

• Readiness scores;

• Outstanding requirements; and

• Recruitment communications.

4.7 Provider information

• Organisation and representative details;

• Registration and accreditation information;

• Branch locations;

• Courses and services;

• Pricing;

• Availability;

• Booking details; and

• Payment information.

4.8 Transaction information

• Package selected;

• Order and invoice details;

• Payment status;

• Subscription information;

• Placement or usage limits; and

• Transaction references.

Afrivio may use an authorised payment provider. Full payment-card details are generally processed by the payment provider rather than Afrivio.

4.9 Technical information

• Internet Protocol address;

• Device and browser information;

• Login records;

• Activity logs;

• Cookie identifiers;

• Security events;

• Diagnostic information; and

• General usage information.

4.10 Communications

Afrivio may retain:

• Support requests;

• Complaints;

• Emails;

• Platform messages;

• Consent and withdrawal requests; and

• Other communications with Afrivio.

5. Special personal information and medical privacy

Health and medical information may qualify as special personal information and receives additional protection.

Afrivio does not display a user’s:

• Medical results;

• Diagnosis;

• Medical history;

• Test values;

• Clinical notes; or

• Detailed medical information

to potential employers through an ordinary workforce profile.

Employers may only see limited project-readiness statuses where appropriate, such as:

• Occupational medical required;

• Medical requirement outstanding;

• Appointment booked; or

• Medical document submitted.

Even limited medical-readiness information will only be processed where lawful and necessary.

Where a user chooses to upload a medical certificate or related document, Afrivio will request appropriate permission and apply restricted access.

Clinical information remains under the control and professional responsibility of the relevant medical provider.

6. Where information comes from

Afrivio may receive personal information:

• Directly from you;

• From an employer or organisational representative;

• From a training or medical provider;

• From a verification institution or authorised verification service;

• Through platform activity;

• From publicly available lawful sources; or

• From another source where you authorised disclosure or the law permits it.

Where reasonably practicable, Afrivio will inform you if important personal information is obtained from another source.

7. Why Afrivio processes information

Afrivio may process personal information to:

• Create and manage accounts;

• Build workforce and emerging-talent profiles;

• Make profiles visible to authorised potential employers;

• Match candidates with relevant projects and opportunities;

• Generate proximity and readiness indicators;

• Record and display AI-guided video interviews;

• Identify missing documents, training or medical requirements;

• Facilitate shortlisting and project invitations;

• Allow candidates to accept or decline invitations;

• Help employers assemble and monitor project teams;

• Facilitate training or medical bookings;

• Manage employer and provider packages;

• Process payments;

• Provide customer support;

• Prevent fraud and platform misuse;

• Protect platform security;

• Maintain records;

• Improve platform functionality;

• Comply with legal obligations; and

• Send marketing where permitted.

Afrivio will not use personal information for an incompatible purpose without providing appropriate notice and obtaining any consent required by law.

8. Grounds for processing

Depending on the circumstances, Afrivio may process personal information because:

• You consented;

• Processing is necessary to provide a service or perform an agreement with you;

• Processing is required by law;

• Processing protects a legitimate interest of the user;

• Processing is necessary for Afrivio’s legitimate interests or those of a third party, where permitted; or

• Another lawful ground applies.

Where Afrivio relies on consent, you may withdraw that consent, subject to legal and operational consequences explained at the time.

Withdrawal does not make earlier lawful processing unlawful.

9. Profile visibility and employer access

When you activate employer visibility, authorised potential employers may view your workforce profile for recruitment, project matching and workforce-readiness purposes.

The information available may include:

• Name and profile photograph;

• General location;

• Preferred work locations;

• Skills and experience;

• Qualifications;

• Submitted-document and verification status;

• Availability;

• Travel preferences;

• Readiness information; and

• Pre-recorded AI video interview.

Direct contact information may remain hidden until an authorised invitation, placement, introduction or “Add to Team” stage.

Employers may only use profile information for legitimate recruitment and workforce-planning purposes.

10. AI-guided video interview consent

Before the interview begins, Afrivio asks the user to consent separately to:

• Recording their image and voice;

• Storing the interview;

• Adding the interview to the profile; and

• Allowing authorised potential employers to view it for recruitment purposes.

The user completes five questions, with up to one minute for each response.

The interview is intended to support initial screening. It does not independently verify the candidate’s knowledge or qualifications and does not make the final employment decision.

Where Afrivio uses automated tools to organise, summarise or support the presentation of interview information, final recruitment decisions remain the responsibility of the employer.

11. Automated matching and decision support

Afrivio may use automated processes to:

• Compare profiles with project requirements;

• Rank potentially relevant matches;

• Calculate readiness indicators;

• Identify missing requirements;

• Recommend training or medical services; and

• Organise profile or interview information.

These processes are intended to support discovery and administration.

Afrivio does not intend to make a final employment decision based solely on automated processing.

Employers are required to use appropriate human judgement and conduct any additional checks necessary for the role.

Users may contact Afrivio if they believe matching or readiness information is materially incorrect.

12. Who receives personal information

Afrivio may disclose relevant information to:

12.1 Authorised employers

For recruitment, matching, shortlisting, project invitations and workforce planning.

12.2 Selected training providers

When a user requests information or books a training service.

12.3 Selected medical providers

When a user books an occupational medical service.

Only the minimum information reasonably necessary for the booking should be provided. Medical results are not disclosed to potential employers through the ordinary booking process.

12.4 Service providers

Afrivio may use service providers for:

• Hosting and cloud storage;

• Cybersecurity;

• Email and messaging;

• Video recording and storage;

• Payments;

• Analytics;

• Customer support;

• Verification;

• Mapping and location services; and

• Technical maintenance.

These providers may process information only for authorised purposes and subject to appropriate contractual and security requirements.

12.5 Regulators and authorities

Afrivio may disclose information where required by law, court order, regulator, law-enforcement authority or lawful legal process.

12.6 Business transactions

Information may be transferred as part of a lawful merger, investment, reorganisation or sale, subject to appropriate confidentiality and data-protection safeguards.

Afrivio does not sell worker profiles or medical information to unrelated third parties.

13. Training and medical bookings

When a user confirms a booking, Afrivio may share information necessary to arrange the service with the selected provider.

This may include:

• Name;

• Contact details;

• Selected service;

• Preferred branch;

• Appointment date and time; and

• Relevant administrative booking information.

The selected provider becomes independently responsible for information it collects and processes for its own professional or operational purposes.

Users should review the provider’s privacy information where available.

14. Direct marketing

Afrivio will only send promotional communications where permitted.

Where consent is required, marketing consent will be optional and separate from the consent required to create or operate an account.

Users may unsubscribe or opt out at any time by:

• Using the unsubscribe link;

• Changing notification settings; or

• Contacting Afrivio.

Afrivio may still send essential service, security, transactional and account communications.

15. Cookies and similar technologies

Afrivio may use cookies and similar technologies to:

• Operate the website;

• Maintain sessions;

• Remember preferences;

• Protect account security;

• Understand platform usage; and

• Improve performance.

Where required, Afrivio will request consent before using non-essential cookies.

Users can manage cookies through the available cookie settings or browser controls.

Blocking essential cookies may affect platform functionality.

16. Cross-border processing

Some service providers may process or store information outside South Africa.

Where personal information is transferred across borders, Afrivio will take reasonable steps to ensure that the transfer complies with applicable law and that appropriate contractual, organisational or legal safeguards are in place.

17. Information security

Afrivio uses reasonable technical and organisational safeguards designed to protect personal information against:

• Loss;

• Unauthorised access;

• Unlawful processing;

• Destruction;

• Alteration; and

• Disclosure.

Measures may include access controls, encryption, secure hosting, logging, backups, staff restrictions and contractual safeguards.

No digital platform can guarantee absolute security.

Users must protect their passwords and notify Afrivio of suspected unauthorised access.

18. Data breaches

If Afrivio has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, Afrivio will investigate and provide notifications required by applicable law.

Notifications may be made to affected users and the Information Regulator where required.

19. Retention

Afrivio retains personal information only for as long as reasonably necessary for:

• The purpose for which it was collected;

• Providing the requested service;

• Maintaining active recruitment or project records;

• Resolving complaints;

• Preventing fraud;

• Enforcing agreements;

• Meeting tax, accounting or regulatory requirements; and

• Establishing or defending legal claims.

When information is no longer required, Afrivio will delete, destroy, de-identify or restrict it, subject to lawful retention requirements.

Account closure does not always require immediate deletion of every record where retention is legally required or reasonably necessary.

20. Profile withdrawal and account closure

Users may hide their profiles from employer searches through available account settings or by contacting Afrivio.

Users may also request account closure.

Once a profile is hidden:

• It should no longer appear in new employer searches;

• It may remain associated with active applications or project invitations where necessary;

• Information already lawfully accessed by an employer may remain in that employer’s recruitment records; and

• Afrivio may retain limited information where legally required.

21. Your rights

Subject to applicable law, you may have the right to:

• Ask whether Afrivio holds your personal information;

• Request access to your information;

• Request correction or updating;

• Request deletion or destruction where appropriate;

• Object to certain processing;

• Withdraw consent;

• Restrict profile visibility;

• Opt out of direct marketing;

• Request information about recipients;

• Raise a concern about automated matching; and

• Submit a complaint to the Information Regulator.

Afrivio may need to verify your identity before processing a request.

22. How to exercise your rights

Submit privacy requests to:

Privacy email: privacy@afrivioapp.com
Subject: Privacy Request

Please describe your request clearly and provide sufficient information for Afrivio to identify the relevant account.

Afrivio will respond within the period required by applicable law.

23. Information Regulator

You may submit a complaint to the South African Information Regulator.

Website: https://inforegulator.org.za
Email: POPIAComplaints@inforegulator.org.za
Telephone: 0800 017 160
Address: 27 Stiemens St, Braamfontein, Johannesburg, 0001

Users should verify the Regulator’s current contact details before submitting a complaint.

24. Children

Afrivio accounts are currently intended for people aged 18 or older.

Afrivio does not knowingly create searchable workforce profiles for children without an appropriate legal basis and any consent required from a competent person.

If Afrivio introduces services for users under 18, a separate age-appropriate consent and privacy process will apply.

25. Accuracy of information

Users are responsible for keeping their information accurate and current.

Afrivio may allow users to correct profile information through their account settings.

Users should promptly update:

• Contact details;

• Availability;

• Location;

• Qualifications;

• Credential status;

• Employment preferences; and

• Other information affecting project matching.

26. Changes to this Privacy Notice

Afrivio may update this Notice when its services, technology or legal obligations change.

Material changes will be communicated through the platform, by email or by another reasonable method.

The latest version will be available on the Afrivio website and will show its effective date.

27. Related documents

This Privacy Notice should be read together with:

• Afrivio’s Terms and Conditions;

• Cookie Notice;

• Applicable package or subscription terms;

• Provider terms; and

• Any additional consent presented for a specific feature.

28. Contact Afrivio

Questions about this Privacy Notice or Afrivio’s processing of personal information may be sent to:

Afrivio / KTZ Holdings (Pty) Ltd
Email: support@afrivioapp.com
Information Officer: Coralie Diaz, Director and Information Officer