Privacy Policy

Grissom SA (Pty) Ltd ("Grissom", "we", "us", or "our") is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us. This Privacy Policy explains how we collect, process, use, disclose, store, transfer, retain, and protect personal information obtained through our website, recruitment activities, corporate services, governance support, operational support services, communications, and other interactions.

Grissom is a corporate services company providing corporate administration, governance support, recruitment coordination, strategic coordination, executive support, and operational support services to businesses operating across multiple jurisdictions.

This Privacy Policy applies to visitors to our website, prospective, current, and former clients, directors, officers, shareholders, beneficial owners, and representatives of businesses, recruitment candidates and applicants, employees, contractors, consultants, and service providers, suppliers and professional advisers, individuals who communicate with Grissom, and any person whose personal information is processed by Grissom.

By accessing our website, submitting information to us, applying for opportunities coordinated by us, or otherwise engaging with Grissom, you acknowledge that your personal information may be processed in accordance with this Privacy Policy.

Grissom is established in South Africa and processes personal information in accordance with the Protection of Personal Information Act, 2013 ("POPIA"), the Promotion of Access to Information Act, 2000 ("PAIA"), and any other applicable data protection laws that may apply to specific processing activities.

Where Grissom processes personal information relating to individuals located in other jurisdictions, including the European Union, the United States of America, or the United Kingdom, we endeavour to process such information in a manner consistent with applicable international privacy principles.

Depending on the circumstances, Grissom may act either as a Responsible Party or Operator. Grissom acts as a Responsible Party (or Controller) where we determine the purpose and means of processing personal information, including website administration, direct communications with individuals, recruitment administration, candidate database management, marketing communications, and internal business administration.

Grissom may also act as an Operator (or Processor) on behalf of clients, companies, or employing entities, including corporate administration support, recruitment coordination, governance administration, and operational support services. Where Grissom acts solely as an Operator, the relevant client or employing entity remains responsible for determining the purposes and means of processing.

Depending upon our relationship with you, we may collect identity information such as your full name, date of birth, nationality, identity number, passport number, and driver's licence information.

We may also collect contact information including residential and postal addresses, telephone and mobile numbers, and email addresses. Professional information may include your curriculum vitae, employment history, educational qualifications, professional memberships, skills, competencies, and references.

Corporate information may include company name, position held, shareholding and directorship information, beneficial ownership information, and corporate contact details. Recruitment information may include assessment and screening results, employment preferences, salary expectations, and candidate communications.

When visiting our website we may collect technical information including IP address, browser type, device information, operating system, website usage information, geographic location data, session information, and referral information. We may also collect information contained in emails, telephone calls, website enquiries, contact forms, correspondence, and meetings.

We do not intentionally collect Special Personal Information unless it is required by law, necessary for recruitment purposes, necessary for employment-related obligations, required for legal compliance, or where you have provided explicit consent.

Where appropriate and lawful, recruitment-related screening may involve criminal record checks, sanctions screening, Politically Exposed Person (PEP) screening, qualification verification, and identity verification. Such processing will only occur where legally permissible and necessary.

We may collect information directly from you, through our website, through recruitment applications, during interviews, through communications, from references you provide, from clients and affiliated businesses, from recruiters and agencies, from publicly available sources, from professional networking platforms, from government or regulatory authorities, and through cookies and analytics technologies.

We process personal information for legitimate business purposes including corporate administration, governance support, entity administration, executive support, strategic coordination, and operational support.

We process information for recruitment purposes including advertising vacancies, candidate sourcing, screening, assessment, interview coordination, verification checks, recruitment administration, and onboarding support.

We process information for business administration including relationship management, correspondence, client support, supplier management, and record keeping. We also process information for legal compliance including compliance obligations, risk management, fraud prevention, regulatory reporting, legal proceedings, and enforcement of rights.

We process information for website management including website operation, security monitoring, analytics, and user experience improvements.

Recruitment is a core function of Grissom. Grissom coordinates recruitment activities on behalf of companies and clients operating across multiple industries and jurisdictions.

By applying for opportunities through Grissom, candidates acknowledge that Grissom may process candidate information for recruitment purposes, candidate information may be shared with prospective employers, information may be reviewed by hiring managers and authorised decision-makers, information may be transferred internationally where opportunities exist in other jurisdictions, and verification and screening processes may be undertaken where lawful and appropriate.

Grissom acts solely as a recruitment coordinator and administrative facilitator. Final hiring decisions are made exclusively by the relevant employing entity. Successful candidates may be employed, contracted, or otherwise engaged directly by the relevant company rather than by Grissom.

Unless otherwise required by law, unsuccessful candidate information may be retained for up to 12 months after completion of a recruitment process. Candidates may consent to remain in Grissom's talent pool for future opportunities and may request removal from the talent pool at any time.

We do not sell personal information. Personal information may be shared with clients, affiliated companies, associated businesses, prospective employing entities, recruitment service providers, background screening providers, professional advisers, auditors, insurers, technology providers, cloud hosting providers, government authorities, regulators, courts, and tribunals. Such information is shared only where necessary, lawful, or reasonably required.

Because Grissom supports businesses operating internationally, personal information may be transferred to, stored in, or accessed from jurisdictions outside South Africa. Where cross-border transfers occur, Grissom will take reasonable steps to ensure that the recipient is subject to laws providing adequate protection, appropriate contractual safeguards exist, transfers are necessary for contractual performance, transfers are authorised by law, and appropriate consent has been obtained where required.

Grissom maintains appropriate technical and organisational measures designed to protect personal information, including access controls, user authentication, encryption where appropriate, secure storage systems, monitoring systems, and confidentiality obligations.

In the event of an actual or suspected security incident affecting personal information, Grissom will investigate the matter and take appropriate remedial measures. Where required by applicable law, Grissom may notify affected individuals, relevant regulatory authorities, and other parties required by law.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, enforce contractual rights, and maintain lawful business records. Information that is no longer required will be securely deleted, destroyed, anonymised, or de-identified.

Subject to applicable law, you may have the right to access personal information, request correction of inaccurate information, request deletion of information, object to processing, restrict processing, withdraw consent, request portability where applicable, and lodge complaints with a regulatory authority. Requests may be submitted using the contact details below.

Where permitted by law, Grissom may send communications relating to services, recruitment opportunities, business updates, and corporate announcements. Recipients may opt out at any time using the unsubscribe facility or by contacting Grissom.

Grissom maintains a Promotion of Access to Information Act ("PAIA") Manual as required by South African law. The PAIA Manual is available upon request. Additional information regarding PAIA, prescribed forms, guides, and templates may be obtained from the Information Regulator (South Africa).

Grissom may amend this Privacy Policy from time to time. Updated versions will be published on our website together with the revised effective date.

For general enquiries please contact info@grissomsa.com. For recruitment enquiries please contact careers@grissomsa.com. For corporate correspondence please contact corporate@grissomsa.com.