Humanitarian Resources Group

PRIVACY POLICY

Humanitarian Resources Group
Effective Date: September 2026
Last Updated: September 2026

1. Our Commitment to Privacy

Humanitarian Resources Group (“HRG,” “we,” “us,” or “our”) is committed to protecting personal information and processing it lawfully, fairly, transparently and securely.

As an international workforce solutions organisation, we may process personal information relating to website visitors, prospective and existing clients, job applicants, consultants, employees, contractors, suppliers, business partners and other individuals with whom we interact.

Our approach reflects applicable privacy and data-protection requirements, including, where applicable, the EU General Data Protection Regulation (“GDPR”), the South African Protection of Personal Information Act 4 of 2013 (“POPIA”), the Personal Information Protection Law of the People’s Republic of China (“PIPL”), and other applicable national privacy and data-protection laws.

POPIA, for example, establishes requirements covering lawful and purpose-specific processing, transparency, information quality, security and data-subject rights. Our guiding principle is simple:

Your information should be treated with the same integrity and care that we bring to our people.

2. Who We Are

Humanitarian Resources Group provides workforce, recruitment, mobilisation, workforce-management, duty-of-care and HR advisory solutions to organisations operating internationally and in complex environments.

Depending upon the circumstances and applicable law, HRG may act as a data controller, responsible party, personal information processor, processor, operator or service provider in relation to personal information.

In some circumstances, HRG processes information on behalf of a client. In those cases, the client may determine the purposes and means of processing, and HRG will process the information in accordance with applicable law, contractual requirements and the client’s lawful instructions.

3. Personal Information We May Collect

Depending upon your relationship with HRG, we may collect:

Identity and contact information: name, address, telephone number, email address, nationality, date of birth and other identifying information.

Professional and recruitment information: CV/résumé, employment history, education, qualifications, professional memberships, languages, skills, references, compensation information and assignment preferences.

Recruitment and assessment information: interview records, assessments, candidate evaluations, reference information and information concerning suitability for an assignment.

Deployment and mobilisation information: passport and immigration information, visas, work authorisations, travel information, emergency contacts, deployment location, training records and assignment-related documentation.

Financial and contractual information: payment details, banking information, tax information, contracts, invoices and related records.

Website and technical information: IP address, browser and device information, website activity and information collected through cookies or similar technologies where used.

Communications: correspondence and information you provide when contacting HRG, submitting an enquiry, applying for an opportunity or communicating with our team.

We may also process sensitive or special-category personal information where necessary and permitted by applicable law. This may include health or medical-readiness information, biometric or identity information, criminal-background information where legally permissible, and information necessary to meet safeguarding, security, immigration or deployment requirements.

We apply additional safeguards where sensitive information is processed.

4. How We Collect Information

We may obtain personal information:

  • directly from you;
  • through the HRG website and enquiry forms;
  • through recruitment applications and talent-registration processes;
  • during interviews and assessments;
  • from references you authorise us to contact;
  • from publicly available professional sources;
  • through clients and project partners;
  • through authorised recruitment, screening or workforce-management providers; and
  • from governmental, immigration, security or other authorised sources where lawful and necessary.

If you would prefer for cookies not to be used, please use the cookies opt-out tool provided when you reach the applicable site.  Or, please reach out to us at privacy@humanitarianresourcesgroup.com with any specific questions.  Please note that we do our best to honor any Internet cookie rejection settings you may use on your device or browser, but cookie rejection settings may cause you to be unable to access all of the features or functionalities of a given site. 

How Might We Share Personal Data?

In connection with the purposes described in this Policy, we may share your Personal Data with our affiliates and our third-party service providers.  These third-party providers may include consultants, legal service providers, technology providers (e.g. hosting service providers, software service providers, IT, and related infrastructure providers) where appropriate for these third parties to assist us with such purposes (or to generally support our general business operations or business functions).

In case of a merger, acquisition, and/or other reorganizations and restructurings of our business (including prospective transactions), we may share your Personal Data with, or transfer your Personal Data to, (potential) buyers, acquirers, or business partners, as necessary to facilitate and/or effectuate such (potential) merger, acquisition and/or other reorganizations and restructurings.

If you would like to know more about our service providers where your Personal Data could be involved, we are happy to discuss specific questions.  Please reach out to us at privacy@humanitarianresourcesgroup.com.  By communicating with us, you are confirming your legitimate interest in such communications and our processing and handling of your Personal Data as a result, including sharing your Personal Data with third party providers, as discussed in this section.  Where required under applicable law, we will also honor any request to have your Personal Data excluded from a given service provider and/or deleted.  However, please note that any request to not have Personal Data shared with a service provider may make it difficult or impossible for us to communicate with you.  So, we reserve the right to remove you from any impacted lists or communications accordingly if you make any such request.

5. Why We Process Personal Information

HRG may process personal information to:

Recruit and mobilise personnel
Identify, assess, select, verify, contract, onboard and deploy qualified professionals.

Manage our workforce
Administer contracts, payroll, benefits, performance, learning, assignments and workforce support.

Provide duty of care
Support security, medical readiness, travel, emergency response, safeguarding and personnel welfare.

Deliver client services
Respond to workforce requirements, manage assignments and provide contracted services.

Operate our business
Manage suppliers, partnerships, financial administration, compliance, risk, auditing and organisational operations.

Communicate with you
Respond to enquiries, provide relevant service information and maintain professional relationships.

Meet legal and regulatory obligations
Comply with employment, immigration, taxation, safeguarding, security, anti-fraud and other applicable requirements.

Protect people and organisations
Prevent fraud, protect information systems, manage security incidents and protect the rights, safety and interests of HRG, our personnel, clients and others.

6. Legal Bases for Processing

Where GDPR or similar legislation applies, HRG processes personal information only where an appropriate legal basis exists, which may include:

Consent — where you have given valid consent for a specified purpose.

Contract — where processing is necessary to enter into or perform a contract with you.

Legal obligation — where processing is necessary to comply with applicable law.

Legitimate interests — where processing is necessary for HRG’s or another party’s legitimate interests and those interests are not overridden by your rights and interests.

Vital interests — where processing is necessary to protect someone’s life or physical safety.

Other lawful bases may apply where permitted by relevant legislation.

Where processing is based upon consent, you may withdraw that consent, subject to applicable law.

PIPL similarly establishes lawful circumstances for processing, including consent, contractual necessity, HR management under lawful employment rules, and statutory obligations.

7. Recruitment and Candidate Information

When you apply for an HRG opportunity or join our talent network, we may use your information to:

  • assess your qualifications and suitability;
  • communicate about current or future opportunities;
  • conduct interviews and assessments;
  • verify qualifications, credentials and references;
  • conduct legally permitted screening;
  • present your candidacy to a client where appropriate;
  • manage contracting and mobilisation;
  • maintain an HRG talent profile for future opportunities; and
  • meet legal, contractual and safeguarding requirements.

HRG does not charge candidates recruitment or placement fees for access to employment or assignment opportunities.

Where we wish to retain candidate information for future opportunities beyond the period reasonably required for a particular recruitment process, we will do so in accordance with applicable law.

8. Sharing Personal Information

HRG does not sell personal information.

We may share information where necessary and lawful with:

  • HRG entities and authorised personnel;
  • clients considering or managing your assignment;
  • payroll, benefits and workforce-administration providers;
  • recruitment and assessment providers;
  • background and credential-verification providers;
  • travel, immigration and relocation providers;
  • security, medical and duty-of-care providers;
  • insurers and professional advisers;
  • technology, hosting and communications providers;
  • government, regulatory, judicial or law-enforcement authorities where legally required; and
  • other parties where you have authorised disclosure or where permitted by law.

We require service providers processing personal information on our behalf to protect that information appropriately and use it only for authorised purposes.

9. International Data Transfers

Because HRG operates internationally, personal information may be processed or accessed in countries other than the country in which it was collected.

Where required, HRG uses appropriate safeguards for international transfers, which may include contractual protections, approved transfer mechanisms, adequacy arrangements, consent where legally appropriate, or other mechanisms recognised under applicable law.

POPIA specifically regulates transfers of personal information outside South Africa, while PIPL imposes additional requirements for providing personal information outside China.

Where PIPL applies to a cross-border transfer, additional notice, separate consent and/or legally prescribed transfer mechanisms may be required.

10. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected, including applicable legal, contractual, tax, employment, safeguarding, audit and dispute-resolution requirements.

Retention periods may therefore differ according to the type of information and the country in which processing occurs.

When personal information is no longer required, HRG will securely delete, destroy or anonymise it as appropriate and subject to applicable legal requirements.

11. Information Security

HRG uses reasonable and appropriate administrative, organisational, physical and technical safeguards designed to protect personal information against:

  • unauthorised access;
  • unlawful processing;
  • accidental loss;
  • alteration;
  • disclosure;
  • misuse; and
  • destruction.

Access to personal information is restricted according to business need and appropriate authorisation.

No internet or information-storage system can be guaranteed to be completely secure. HRG therefore continuously evaluates its safeguards based on the nature and sensitivity of the information processed and relevant risks.

POPIA expressly requires appropriate technical and organisational measures against loss, damage, unauthorised destruction/access and unlawful processing.

12. Your Privacy Rights

Depending upon where you live and which law applies, you may have the right to:

Access personal information we hold about you.

Correct inaccurate or incomplete information.

Delete or request erasure of personal information in circumstances provided by law.

Restrict processing of your information.

Object to processing, including certain direct-marketing activities.

Withdraw consent where processing relies upon consent.

Request portability of certain personal information where applicable.

Request information about processing, including the purposes for which your information is used and parties with whom it has been shared.

Object to or seek review of certain automated decisions where applicable.

Complain to an appropriate data-protection authority.

POPIA recognises rights including notification, access, correction/deletion and objection, while PIPL gives individuals rights to be informed, make decisions concerning processing, restrict or refuse processing, and access/copy personal information.

You will not be discriminated against for appropriately exercising a privacy right.

13. Automated Decision-Making and AI

HRG may use technology to support recruitment, workforce administration, analytics or operational processes.

Where automated tools are used, HRG remains committed to fair, responsible and human-centred decision-making.

Where required by applicable law, individuals will be provided with relevant information and rights concerning decisions based solely or materially upon automated processing.

HRG does not intend technology to replace appropriate human judgement in consequential employment or deployment decisions.

I particularly recommend keeping this section given where international recruitment technology is heading.

14. Cookies and Website Technologies

Do We Use Cookies?

To help operate our websites, apps and other sites we do utilize cookies (small text-based files that are saved on your device when you visit that help the site remember certain information about your activity on the site and certain preferences relating to the site).   Most cookies are set up to be retained, preventing the need to re-save or re-enter the data each time you use the site.  We use cookies to better monitor your use of our sites and simplify and tailor your use of our sites to your preferences.   Cookies may contain Personal Data in certain circumstances, but we use those cookies only for these purposes.

The cookies we use may include the following:

If you would prefer for cookies not to be used, please use the cookies opt-out tool provided when you reach the applicable site.  Or, please reach out to us

The HRG website may use cookies and similar technologies necessary for website operation, security, analytics, functionality or user preferences.

Where applicable law requires consent for non-essential cookies, such technologies will be used only after appropriate consent has been obtained.

Users should be provided with mechanisms to accept, reject or manage applicable non-essential cookies.

This means we need to check your actual WordPress cookie configuration before launch. A privacy policy by itself does not solve cookie-consent requirements.

15. Marketing Communications

Where permitted by law, HRG may send information concerning our services, opportunities or professional activities.

Where consent is required, we will obtain it before sending such communications.

Recipients may opt out of marketing communications at any time using the unsubscribe mechanism provided or by contacting HRG.

Opting out of marketing communications will not prevent HRG from sending necessary operational, contractual or service-related communications.

16. Children’s Privacy

HRG’s website and services are not generally directed toward children.

We do not knowingly collect personal information from children through our website except where necessary, lawful and subject to appropriate safeguards and authorisation.

17. Data Breaches

HRG maintains processes for identifying, investigating, containing and responding to personal-information security incidents.

Where a breach triggers notification requirements under applicable law, HRG will notify the relevant supervisory or regulatory authority and affected individuals as required.

18. Third-Party Websites

Our website may contain links to third-party websites, learning platforms, client portals or other external services.

HRG is not responsible for the privacy practices of independent third parties. We encourage users to review the privacy notices of external services before providing personal information.

19. Exercising Your Rights

To exercise a privacy right, ask a question about our processing of personal information, withdraw consent where applicable, or raise a privacy concern, contact:

Humanitarian Resources Group
Privacy / Data Protection
Email: [PRIVACY EMAIL]
Website: Humanitarian Resources Group website

We may need to verify your identity before fulfilling certain requests.

We will respond within the timeframe required by applicable law.

20. Complaints

We encourage you to contact HRG first if you have concerns about our handling of your personal information so that we can investigate and respond.

Where applicable, you also have the right to lodge a complaint with the competent privacy or data-protection regulator in your jurisdiction.

For individuals protected by POPIA, this may include the Information Regulator of South Africa. POPIA established the Information Regulator and provides statutory rights concerning personal information.

Individuals protected by GDPR may have the right to complain to the competent supervisory authority in the EU/EEA jurisdiction concerned.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, processing practices or legal obligations.

The Last Updated date at the beginning of this policy will indicate when the most recent revision was made.

Where required by law, we will provide additional notice of material changes.

© 2026 Humanitarian Resources Group

Delivering with integrity.