May 2026

Xhuma Talent Privacy Policy

We respect your privacy and are committed to protecting your personal information.

Xhuma Talent (Pty) Ltd (“Xhuma”) respects your privacy and is committed to protecting it through our compliance with this policy. This document details the types of information we may collect or that you may provide when you access, use or register with Xhuma’s website and mobile application (collectively “Services”) and our practices for using, maintaining, protecting and disclosing that information.

Please read this carefully to understand our policies and practices regarding your information and how we will treat it. By using or registering with our Services, you agree to this Privacy Policy. Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates as it may change from time to time.

Information We Collect and How We Collect It

Directly from you when you provide it to us.
Automatically when you use the Services.

Information You Provide to Us

When you use or register with the Services, we may ask you to provide information by which you may be personally identified, such as your name, email address, telephone number, location, qualification history, subjects and qualification performance, age, credit card information and any other identifier by which you may be contacted online or offline ("Personal Information").

This information includes:

Information that you provide by filling in forms in the Services. This includes information provided at the time of registering to use the Services, using the Services and requesting help.
If you complete an XAB assessment, questionnaire, or survey on one of our platforms, we treat your responses and your results as confidential information. Your personal information can only be shared with your Educational Institution/School, Prospective Bursary/Scholarship Provider or Prospective employer for purposes of research or for the purposes of extending a Bursary-, Scholarship-, Internship- or Job Offer. Your data will not be sold or shared with other third parties.
Details of transactions you carry out through the Services and of the fulfilment of your orders. You may be required to provide financial information before placing an order through the Services or receiving payment.
Records and copies of your correspondence (including e-mail addresses and phone numbers), if you contact us. We may also ask you for information when you report a problem with the Services.
Your responses to surveys that we might ask you to complete for research and development purposes.

Automatic Information Collection

When you download, access or use the Services, it may use technology to automatically collect:

Usage Details. When you access and use the Services, we may automatically collect certain details of your access to and use of the Services, including traffic data, location data, logs and other communication data and the resources that you access and use on or through the Services.
Device Information. We may collect information about your computer, mobile device and internet connection, including the computer or mobile device's unique device identifier, IP address, operating system, browser type, mobile network information and the device's telephone number.

Local Storage, Cookies, Web Beacons, and Tracking

Our Services use local storage and cookies, which are small text files that are intended to make the Services better for you to use. In general, cookies are used to retain preferences, store information for things like shopping carts, and provide tracking data to third-party applications like Google Analytics. You may, however, disable cookies on the Services. The most effective way to do this is to disable cookies in your browser.

Use of Personal Information We Collect

We may use the information we collect from you in the following ways:

To set up your account with us.
To provide an analysis of your survey responses.
To perform transactions through the Services and third-party service providers.
To personalize your user experience and to allow us to deliver the type of content and offerings in which you are most interested, including sending you personalized job, internship and bursary alert correspondence.
To facilitate research and monitor performance at your Educational Institution/School
To deliver service messages and other services and content you request and send information related to accounts and services, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages, and to enable user-to user communication.
To conduct an aggregated analysis of the performance of our Services, including referral data if you arrive at our website from an external source.

All the data we collect at Xhuma is necessary for us to deliver the services you use. The amount we collect has been minimized wherever possible to respect your privacy.

Should you still disagree with the collection and processing of this data, we recommend you stop using our services or contact us at support@xhuma.io for assistance.

How We May Share Information We Collect

We may share personal information as follows:

We may share personal information with your consent. For example, you may let us share personal information with third parties for research purposes. Those uses will be subject to the third-party privacy policies.
To provide to third party service providers that perform services on our behalf, such as third-party researchers to perform data analysis, and with third-party payment platforms to fulfill an order.
We may share personal information when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding.
We may share information to respond to lawful requests and legal processes, and with banking partners as required by credit card association rules.
We may share information to protect the rights and property of Xhuma, our agents, customers, and others. This includes enforcing our agreements, policies, and terms of use.
We may share information in an emergency. This includes protecting the safety of our employees and agents, our customers, or any person.
We may share information with those who need it to do work for us, but we will first obtain your consent.
We may share personal information with your Educational Institution or School for their research purposes. Those uses will be subject to the third-party privacy policies.
We may share your information with a Prospective Employer or Bursary/Scholarship provider to obtain an internship/job opportunity or bursary/scholarship opportunity for you. Your consent is obtained when you use the Xhuma Bursary Chatbot Service or the Xhuma Careers Service in conjunction with the Xhuma XAB service.

We may also share aggregated and/or anonymized data with others for their own uses.

Legal Basis for Processing Personal Information

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only (i) where we need the personal information to perform a contract with you; (ii) where the processing is in our legitimate interests and not overridden by your rights; or (iii) where we have your consent to do so. We have a legitimate interest in operating our Services and communicating with you as necessary to provide these Services, for example when responding to your queries, improving our platform, undertaking research and marketing our services.

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

Data Retention

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process personal information, we will either delete or anonymize it or, if this is not possible (for example, because personal information has been stored in backup archives), then we will securely store personal information and isolate it from any further processing until deletion is possible.

Security of Your Personal Information

The security of your Personal Information is important to us. When you enter sensitive information (such as credit card number) on our Services, we encrypt that information using secure socket layer technology (SSL).

Xhuma takes reasonable security measures to protect your Personal Information to prevent loss, misuse, unauthorized access, disclosure, alteration, and destruction. Please be aware, however, that despite our efforts, no security measures are impenetrable.

If you use a password on the Services, you are responsible for keeping it confidential. Do not share it with any other person. If you believe your password has been misused, please notify us immediately.

Your Data Protection Rights Under The General Data Protection Regulation (GDPR)

If you or a user are a resident of the EEA, you have the following data protection rights:

You may access, correct, update, or request deletion of your personal information.
In addition, you can object to the processing of your personal information, ask us to restrict the processing of your personal information, or request portability of your personal information.
You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you.
Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. To exercise any of these rights, please contact us at support@xhuma.io

Contact Us

If you have any questions about this Privacy Policy, or want to exercise your privacy rights, contact us at support@xhuma.io.

Updating and Accessing Your Personal Information

If you would like to review, update, correct, or access the personal information we hold about you, please contact us at the email address above. We will respond to verified requests within a reasonable timeframe and in accordance with applicable data protection laws.

If you believe any personal information we have is inaccurate or incomplete, you may request that we update or correct it. Where applicable, you may also request deletion of your personal information, subject to our legal and operational retention obligations.