Legal
Privacy Notice
Last updated
This notice explains how [Legal entity name] ("WORKZA") collects and uses personal data when you use the WORKZA Platform. We are the data controller. Our Data Protection Officer can be reached at [dpo email]. We process personal data in line with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation.
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | name, email, phone, location (state and LGA), address, business name, profile photo, account type | You |
| Identity verification | ID type and number (for example NIN), ID document image, phone verification status | You; our verification provider |
| Jobs and marketplace | job descriptions, applications, messages, reviews, orders, delivery addresses | You and other users |
| Payments | wallet balance and transactions, payment references, bank account details for payouts, payment PIN (stored only as a salted hash) | You; our payment partner |
| Loan applications | requested amount, purpose, income band, employment status | You |
| Aggregator programme | referral codes, referred users, commission records | You; Platform activity |
| Technical | device and browser information, IP address, pages viewed, log data | Automatically |
We do not collect card numbers; card payments are entered directly with our payment partner.
2. Why we use it and our lawful basis
- To provide the Platform, match jobs, process payments and payouts, and run the aggregator programme: performance of a contract.
- To verify identity, prevent fraud, meet anti-money-laundering and payment regulations, and keep records: legal obligation and legitimate interest.
- To send service notifications (job updates, payments, disputes) by in-app message, email and SMS: performance of a contract.
- To send marketing communications: consent, which you can withdraw at any time.
- To improve the Platform and measure usage (aggregate, first-party usage statistics and error monitoring): legitimate interest.
3. Who we share it with
- Other users, only what they need: a Worker's public profile and reviews; a Customer's first name and job details; contact details and address only after a job is accepted; buyer delivery details to the seller of an order.
- Service providers acting on our instructions: our hosting and database provider ([hosting provider]), file storage provider ([storage provider]), payment service provider ([Paystack]), SMS provider ([Termii]), identity verification provider ([name]), email provider, error monitoring.
- Third-party lenders, only when you submit a loan application to them.
- Regulators, law enforcement and professional advisers where required by law or to protect rights.
We do not sell personal data.
4. International transfers
Some providers store data outside Nigeria. Where we transfer personal data abroad we rely on the safeguards permitted under the NDPA, including adequacy decisions and contractual protections.
5. Retention
Account data is kept while your account is active and for [7] years after closure for financial and legal records. Identity documents are retained for [the period required by applicable KYC rules] and then deleted. Messages are retained for [12] months after a job closes. You may ask us to delete data earlier where the law allows.
6. Your rights
You have the right to access, correct, delete or port your data, to object to or restrict processing, to withdraw consent, and to lodge a complaint with the Nigeria Data Protection Commission. Contact [dpo email]; we respond within 30 days.
7. Security
Data is encrypted in transit; identity documents are stored privately and accessed only through time-limited links by authorised staff; payment PINs are hashed; access to admin tools is role-based and logged.
8. Children
The Platform is not for anyone under 18.
9. Changes
We will notify you of material changes by email or in-app notice.