Privacy Policy

1. Introduction

Welcome to NaijaJob, operated by LonerTech LTD ("we," "us," "our"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy describes how we collect, use, store, protect, and share information about you when you use our website, mobile applications, and related services (collectively, the "Services"). By accessing or using NaijaJob, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Our Commitment

NaijaJob complies with:

• Nigeria Data Protection Regulation (NDPR) 2019
• European Union General Data Protection Regulation (GDPR) where applicable
• Industry best practices for data security and privacy

2. Information We Collect

We collect various types of information to provide and improve our Services:

2.1 Information You Provide Directly

Account Registration Information:

• Job Seekers: Full name, email address, phone number, password, location (city/state), professional title, work experience, education, skills, resume/CV, portfolio links
• Employers: Company name, email address, phone number, password, company size, industry, website, company description, business registration details, contact person information

Profile Information:

• Profile photos and company logos
• Biographical information and career summaries
• Work history, educational background, and certifications
• Skills, languages, and professional achievements
• Salary expectations and availability status
• Job preferences and career goals

Job-Related Information:

• Job postings and descriptions
• Job applications and cover letters
• Employment history and references
• Communication between employers and job seekers

Payment Information:

• Billing name and address
• Payment method details (processed securely through third-party payment processors)
• Transaction history

Communication Information:

• Messages sent through our platform
• Customer support inquiries and correspondence
• Feedback and survey responses
• Email communications and preferences

2.2 Information Collected Automatically

Usage Information:

• Pages viewed, features accessed, and time spent on pages
• Search queries and filters used
• Jobs viewed, saved, or applied to
• Profile views and interactions
• Click patterns and navigation paths

Device Information:

• Device type, operating system, and browser type
• IP address and general location data
• Device identifiers and mobile network information
• Screen resolution and display settings

Cookies and Similar Technologies:

• Session cookies for authentication
• Preference cookies for user settings
• Analytics cookies for usage statistics
• Marketing cookies for advertising (with consent)

2.3 Information from Third Parties

Social Media Connections:

• Profile information from LinkedIn, Facebook, or Google (if you choose to connect)
• Professional credentials and endorsements
• Network connections and shared contacts

Background Verification:

• Educational verification from institutions
• Employment verification from previous employers (with consent)
• Professional certification validation

Business Verification:

• Company registration details from CAC (Corporate Affairs Commission)
• Business licenses and permits
• Tax identification information

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision and Improvement

• Account Management: Create, maintain, and manage user accounts
• Job Matching: Connect job seekers with relevant employment opportunities
• Communication: Enable messaging between employers and job seekers
• Search Functionality: Provide powerful search and filtering capabilities
• Recommendations: Suggest relevant jobs, candidates, and content
• Platform Improvement: Analyze usage patterns to enhance user experience

3.2 Business Operations

• Verification: Verify identities and business credentials
• Fraud Prevention: Detect and prevent fraudulent activity
• Legal Compliance: Comply with applicable laws and regulations
• Dispute Resolution: Resolve disputes and enforce agreements
• Analytics: Generate aggregate statistics and insights

3.3 Marketing and Communications

• Job Alerts: Send notifications about relevant job opportunities
• Updates: Inform you about new features and services
• Newsletters: Share career advice and industry insights
• Promotional Content: Send marketing materials (with opt-out option)
• Surveys: Request feedback to improve services

3.4 Legal Bases for Processing (NDPR/GDPR)

4. How We Share Your Information

We respect your privacy and only share information in the following circumstances:

4.1 With Other Users

Public Profile Information:

• Job Seekers: Your profile (name, title, location, experience, skills, resume) is visible to employers when you apply for jobs or make your profile public
• Employers: Your company profile (name, description, location, website) is visible to all users
• Control: You can adjust privacy settings to control what information is visible

Application Information:

• When you apply for a job, your application materials are shared with the employer
• Employers can view your application history for their postings
• Job seekers can see which employers have viewed their profiles

4.2 With Service Providers

We work with trusted third-party service providers who assist in operating our platform:

• Cloud Hosting: AWS, Google Cloud, or similar providers
• Email Services: For sending notifications and communications
• Payment Processors: Stripe, Paystack, or similar payment gateways
• Analytics: Google Analytics and similar tools (anonymized data)
• Customer Support: Help desk and ticketing systems
• SMS Services: For sending verification codes and alerts

4.3 For Legal Compliance

We may disclose your information when legally required or necessary to:

• Comply with court orders, subpoenas, or legal processes
• Respond to government or law enforcement requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of NaijaJob, our users, or the public
• Detect, prevent, or investigate fraud, security, or technical issues
• Comply with NDPR, GDPR, or other data protection regulations

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information with third parties when you explicitly provide consent, such as:

• Connecting your account to third-party services (LinkedIn, Facebook)
• Participating in partnerships or promotional programs
• Authorizing background checks or verification services
• Sharing testimonials or success stories (after obtaining permission)

5. Data Security and Protection

We implement comprehensive security measures to protect your personal information:

5.1 Technical Security Measures

Encryption:

• Data in Transit: SSL/TLS encryption (HTTPS) for all data transmission
• Data at Rest: AES-256 encryption for stored sensitive data
• Password Protection: Industry-standard password hashing (bcrypt)
• Database Security: Encrypted database connections and backups

Access Controls:

• Role-based access control (RBAC) for internal systems
• Multi-factor authentication (MFA) for administrative access
• Regular access audits and permission reviews
• Automated session timeout and logout procedures

Network Security:

• Firewalls and intrusion detection systems
• DDoS protection and rate limiting
• Regular security patches and updates
• Vulnerability scanning and penetration testing

5.2 Organizational Security Measures

Staff Training:

• Regular security awareness training for all employees
• NDPR and GDPR compliance training
• Confidentiality agreements and data protection policies
• Background checks for employees with data access

Incident Response:

• 24/7 security monitoring and alerting
• Documented incident response procedures
• Data breach notification protocols (as required by law)
• Regular security drills and testing

5.3 Data Protection Officer (DPO)

We have appointed a Data Protection Officer to oversee compliance with data protection regulations and handle privacy-related inquiries.

5.4 Your Security Responsibilities

While we implement strong security measures, you also play a crucial role in protecting your account:

• Strong Passwords: Use unique, complex passwords (minimum 8 characters with letters, numbers, and symbols)
• Password Security: Never share your password with anyone
• Logout: Always log out when using shared or public computers
• Phishing Awareness: Be cautious of suspicious emails claiming to be from NaijaJob
• Update Information: Keep your contact information current for security alerts
• Report Suspicious Activity: Immediately notify us of unauthorized account access

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and gather information about usage patterns.

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize you, remember your preferences, and improve our services.

6.2 Types of Cookies We Use

6.3 Third-Party Cookies

We may allow trusted third parties to place cookies on your device for analytics and advertising purposes:

• Google Analytics: Website usage statistics (anonymized)
• Facebook Pixel: Ad performance tracking (with consent)
• LinkedIn Insights: Professional audience analytics
• Payment Processors: Fraud prevention and transaction security

6.4 Managing Cookies

Browser Controls:

Most browsers allow you to control cookies through settings. You can:

• Block all cookies
• Accept only first-party cookies
• Delete cookies after each session
• Receive notifications when cookies are set

Opt-Out Tools:

• Google Analytics: Google Analytics Opt-Out Browser Add-on
• Digital Advertising: Your Online Choices
• Network Advertising: NAI Opt-Out Tool

6.5 Other Tracking Technologies

Web Beacons:

Small transparent images embedded in emails or web pages that help us track email opens and user engagement.

Local Storage:

Browser storage used to save preferences and improve load times for returning visitors.

Device Fingerprinting:

Collection of device characteristics for fraud prevention and security purposes.

7. Your Rights and Choices

Under NDPR, GDPR, and applicable laws, you have the following rights regarding your personal information:

7.1 Right to Access

What it means: You can request a copy of all personal information we hold about you.

How to exercise:

• Log into your account and visit Settings → Privacy → Download My Data
• Or email privacy@naijajob.com.ng with subject "Data Access Request"
• We will provide your data within 30 days in a commonly used format (PDF, CSV, JSON)

7.2 Right to Rectification

What it means: You can correct inaccurate or incomplete personal information.

How to exercise:

• Update your profile information directly in your account settings
• For information you cannot change, contact support@naijajob.com.ng
• We will update your information within 7 business days

7.3 Right to Erasure ("Right to be Forgotten")

What it means: You can request deletion of your personal information under certain circumstances.

How to exercise:

• Navigate to Settings → Privacy → Delete Account
• Or email privacy@naijajob.com.ng with subject "Account Deletion Request"
• Account deletion is permanent and cannot be reversed

7.4 Right to Restriction of Processing

What it means: You can request that we limit how we use your information while a dispute is resolved.

When applicable:

• You contest the accuracy of your data
• Processing is unlawful but you don't want deletion
• We no longer need the data but you need it for legal claims
• You object to processing and verification is pending

7.5 Right to Data Portability

What it means: You can receive your data in a structured, machine-readable format and transfer it to another service.

How to exercise:

• Request data export in your account settings
• We provide data in JSON, CSV, or XML format
• Includes profile data, job applications, and communications

7.6 Right to Object

What it means: You can object to processing based on legitimate interests or for direct marketing.

How to exercise:

• Marketing: Click "Unsubscribe" in any marketing email or adjust email preferences in your account
• Legitimate Interest Processing: Email privacy@naijajob.com.ng explaining your objection
• Profiling/Automated Decisions: Request human review of automated decisions

7.7 Right to Withdraw Consent

What it means: You can withdraw consent for processing activities that require consent.

How to exercise:

• Adjust consent preferences in Settings → Privacy → Consent Management
• Withdrawal does not affect processing conducted before withdrawal
• Some services may become unavailable after consent withdrawal

7.8 Right to Lodge a Complaint

What it means: You can file a complaint with data protection authorities if you believe your rights have been violated.

Relevant Authorities:

• Nigeria: National Information Technology Development Agency (NITDA) - NDPR Complaints
• EU/EEA: Your local Data Protection Authority

7.9 Response Timeline

We will respond to all rights requests within:

• Initial Response: 48 hours (acknowledging receipt)
• Complete Response: 30 days (or less)
• Complex Requests: Up to 60 days (with explanation)

8. Children's Privacy

NaijaJob is designed for adults seeking employment or hiring professionals. We are committed to protecting children's privacy.

8.1 Age Restrictions

8.2 No Intentional Collection from Minors

We do not knowingly collect personal information from individuals under 18 years of age. If we discover that we have inadvertently collected information from a minor:

• We will delete the information immediately
• We will terminate the associated account
• We will notify parents/guardians if contact information is available

8.3 Parental Notice

If you are a parent or guardian and believe your child has provided personal information to NaijaJob:

• Contact us immediately at privacy@naijajob.com.ng
• Provide the child's username or email address
• We will promptly investigate and delete the account

8.4 Educational Use

For educational purposes (career counseling, school programs), accounts may be created with parental consent for users 16-17 years old. Such accounts:

• Require documented parental consent
• Have restricted features (no job applications, limited profile visibility)
• Are marked as "educational" accounts
• Are regularly reviewed for compliance

9. International Data Transfers

NaijaJob operates primarily in Nigeria, but we may transfer data internationally for service provision.

9.1 Data Transfer Locations

Your information may be transferred to and processed in:

• Nigeria: Primary data storage and processing
• European Union: Cloud backup and disaster recovery
• United States: Third-party service providers (cloud hosting, analytics)
• Other Countries: As required for service provision

9.2 Transfer Safeguards

When transferring data internationally, we implement appropriate safeguards:

Legal Mechanisms:

• Standard Contractual Clauses (SCCs): EU-approved data transfer agreements
• Adequacy Decisions: Transfers to countries with adequate protection
• Binding Corporate Rules: Internal policies for multinational transfers
• Explicit Consent: Your consent for specific transfers

Security Measures:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest (AES-256)
• Access controls and authentication
• Regular security audits and assessments

9.3 Cross-Border Job Opportunities

If you apply for jobs in other countries or make your profile visible internationally:

• Your profile may be viewed by employers in those countries
• Application data may be transferred to employer locations
• You can restrict profile visibility by location in privacy settings
• We will inform you when applying to international positions

10. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy.

10.1 Retention Periods

10.2 Account Deletion

When you delete your account:

• Immediate: Account access is revoked, profile hidden from searches
• 30 Days: Grace period for account recovery (data remains but inaccessible)
• After 30 Days: Permanent deletion of profile data, applications, and communications
• Exceptions: Data required for legal, accounting, or security purposes is retained per legal requirements

10.3 Inactive Accounts

For accounts inactive for extended periods:

• 2 Years Inactive: Email notification requesting account confirmation
• 2.5 Years Inactive: Final warning with 30-day deletion notice
• 3 Years Inactive: Account archived (hidden but recoverable)
• 5 Years Inactive: Permanent deletion unless legal retention required

10.4 Data Minimization

We regularly review stored data to:

• Delete or anonymize data no longer needed
• Update retention policies based on legal changes
• Minimize data collection to essential information
• Aggregate historical data for statistical analysis

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

11.1 Notification of Changes

When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Email notification for material changes affecting your rights
• In-app notification upon your next login after updates
• Website banner announcing privacy policy updates
• 30-day notice period before material changes take effect

11.2 Types of Changes

Material Changes (Require Notification):

• New data collection practices
• Changes to data sharing policies
• Modifications to user rights
• Changes in data retention periods
• New third-party service providers with data access

Non-Material Changes (No Notification Required):

• Clarifications and formatting improvements
• Contact information updates
• Minor corrections and typos
• Updates to reflect current practices without policy changes

11.3 Your Options After Changes

After we notify you of material changes:

• Accept Changes: Continue using NaijaJob under the new policy
• Reject Changes: Delete your account before the effective date
• Partial Acceptance: Adjust privacy settings to limit affected features
• Request Information: Contact us with questions about changes

11.4 Version History

We maintain a record of significant policy changes:

• Current Version: December 13, 2025
• Previous versions available upon request
• Summary of changes provided with each update

12. Contact Us

We are committed to addressing your privacy concerns and questions promptly.

12.1 Privacy Inquiries

12.2 Response Timeline

• Acknowledgment: Within 48 hours
• Simple Inquiries: Within 5 business days
• Complex Requests: Within 30 days
• Legal Requests: As required by applicable law

12.3 What to Include in Your Request

To help us process your request efficiently, please include:

• Your full name and registered email address
• Detailed description of your request or concern
• Account username (if applicable)
• Relevant dates or transaction references
• Preferred response method

12.4 Identity Verification

For security purposes, we may request additional information to verify your identity before responding to certain requests:

• Account password or security question answers
• Government-issued ID (for deletion or sensitive requests)
• Confirmation email sent to registered address
• Phone verification code

12.5 Regulatory Authorities

If you believe we have not addressed your privacy concerns adequately, you may contact:

National Information Technology Development Agency (NITDA)
NDPR Complaints and Enquiries
Website: https://nitda.gov.ng
Email: info@nitda.gov.ng