1. Overview
This statement describes how My HR Hub processes and secures data on behalf of its customers.
2. Processing on Instruction
As an operator, we process personal information only on the documented instructions of our customers and for the purposes of providing the service.
3. Security Measures
We employ encryption in transit and at rest, role-based access controls, monitoring and regular automated backups.
4. Sub-processors
Where we use trusted sub-processors (such as cloud hosting), we ensure they provide adequate data protection safeguards.
5. Backups & Retention
Data is backed up regularly and retained in line with legal requirements and customer agreements.
6. Data Breach Response
We maintain an incident response process and will notify affected customers and authorities as required by POPIA.