Privacy Policy

The Company is the data controller for personal data processed through the Platform. Our registered contact for data protection matters is provided at the end of this Policy and will be formally designated as our Data Protection Officer (DPO) once in operation, as required under the NDPA.

We collect the categories of data below, each tied to a specific platform function rather than collected speculatively:

Under the NDPA, we rely on the following lawful bases depending on the activity:

1. (a)Performance of a contract: to create your account, operate matching, process payments, and deliver the features you sign up for.
2. (b)Legitimate interest: to secure the Platform, detect fraud or misuse, and improve matching quality, balanced against your right to privacy.
3. (c)Consent: for optional communications, certain analytics, and any processing of sensitive data where consent is the applicable basis.
4. (d)Legal obligation: where we must retain or disclose data to comply with applicable law or a lawful request from a competent authority.

Match scores and recommendations are generated through an automated process. This process is human-in-the-loop: verification decisions, disputed track-record entries, and any action with a material effect on an account (such as suspension) involve review by a person, and you may request human review of an automated match or verification outcome that affects you.

In the Platform's early stages, some consultant or firm listings may be compiled by our team from publicly available or shared sources to help organisations find relevant expertise before the network has grown through self-registration. Such listings are clearly marked as unconfirmed until the individual or firm claims the profile. If you are added this way, you may claim, correct, or request removal of your listing at any time through [email protected], free of charge.

We share personal data only as needed to operate the Platform:

1. (a)With organisations, consultants, or firms, to the extent necessary for an application, match, or bid-team formation you take part in.
2. (b)With payment processors, to complete subscription billing.
3. (c)With verification and background-check partners, where used, strictly for the purpose of confirming the information you provide.
4. (d)With cloud hosting, storage, database, email and messaging providers, acting as processors under contractual data protection terms.
5. (e)With an AI service provider, which reads the CVs and briefs you upload to fill in your profile or call, and helps explain and check matches. Contact details are removed from matching and Ask The Consultant Place text before it is sent, and the provider uses what it receives only to return the answer.
6. (f)With a competent authority, where required by law.

We do not sell personal data to third parties.

Where personal data is transferred outside Nigeria (for example, to a cloud hosting provider with servers abroad), we take steps consistent with the NDPA's cross-border transfer requirements and the Malabo Convention, including confirming that the receiving jurisdiction or recipient provides an adequate level of protection, or putting contractual safeguards in place where it does not.

The Platform's database, files and application servers are hosted in the European Union. The providers that deliver email and WhatsApp messages, run sign-in with Google or Microsoft, and provide AI features operate from the United States.

We retain personal data for as long as your account is active and for a reasonable period after closure to meet legal, accounting, dispute-resolution, or legitimate business purposes, after which it is deleted or anonymised. Verified track-record entries may be retained in anonymised or aggregated form for Market Insight reporting even after an individual account is closed.

Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; object to or restrict certain processing; request a portable copy of your data; and withdraw consent where consent is the basis for processing. You may exercise these rights by contacting [email protected]. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) or the equivalent authority in your country of residence.

You can also close your account yourself, under Settings, and change your WhatsApp alerts and cookie choices at any time, in Settings or from Cookie settings at the foot of the site.

We use one essential cookie to keep you signed in, and short-lived ones that protect sign-in. With your agreement, we also count which dashboard sections are opened, as totals per account type, to learn which parts of the Platform are used. You choose on your first visit and can change your choice any time from Cookie settings, at the foot of the site and in Settings. Our fonts and scripts are served from our own servers.

We apply technical and organisational measures appropriate to the sensitivity of the data involved, including encryption of messages in transit and at rest, access controls limiting staff access to personal data on a need-to-know basis, and regular review of our security practices. No system is completely secure, and we encourage users to protect their own account credentials.

The Platform is not directed at individuals under 18, and we do not knowingly collect personal data from children. If we become aware that we have done so, we will take steps to delete it.

Everyone who creates an account confirms they are 18 or older.

We may update this Policy as the Platform evolves. Material changes will be notified through the Platform or by email ahead of taking effect, and we ask signed-in members to accept the new version.

For any question about this Policy or to exercise a data protection right, contact [email protected].