Serajobs

Summary: We collect only what we need, use it only to run the platform, never sell it, and give you full control over it. Under the NDPA, you have the right to access, correct, and delete your data.

1. Who we are

Serajobs ("we", "us", "the Platform") is the Data Controller for personal data collected through this platform. We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).

For data-related enquiries, contact us via the contact form.

2. Data we collect

Candidates

Identity data: full name, email address, phone number, date of birth, location
Professional data: work experience, education, skills, certifications, portfolio links
Documents: CV uploads (stored encrypted at rest)
Verification data: identity verification results, skill assessment scores, credential submission status
Application data: jobs applied to, application status, screening responses
Notification preferences and saved searches
Consent records: timestamps and content of fee disclosures acknowledged

Employers

Company data: legal name, registration number, domain email
Representative data: authorised signatory name, title, and contact details
Verification documents: submitted for identity and business verification
Job listings and hiring activity

All users

Account credentials (passwords stored using bcrypt hashing — never in plain text)
Session and activity logs for security monitoring
Device and browser information collected automatically when you access the Platform

3. Lawful basis for processing

We process your personal data under the following lawful bases under the NDPA:

Consent — for marketing communications (you can withdraw at any time) and for the fee disclosure acknowledgement.
Contractual necessity — to deliver the matching, application, and placement services you signed up for.
Legitimate interests — for fraud prevention, platform security, and anonymised analytics to improve the service.
Legal obligation — to comply with applicable Nigerian law, including record-keeping requirements.

4. How we use your data

To create and manage your account
To match candidates with relevant job listings and provide personalised recommendations
To verify identities, companies, and credentials
To process applications and track placement outcomes
To calculate, disclose, and track success fees
To send notifications about matched listings, application updates, and platform news (where you have opted in)
To detect and prevent fraud and policy violations
To improve the platform through anonymised, aggregated analytics

We do not sell your personal data to third parties. We do not use your data for advertising outside the platform.

5. Data sharing

We share personal data only in these circumstances:

Between candidates and employers — your candidate profile is visible to verified employers in accordance with your privacy settings. You can restrict visibility at any time.
Service providers — we use third-party infrastructure providers (hosting, email delivery, file storage) bound by data processing agreements.
Legal compliance — we may disclose data to law enforcement or regulatory authorities when required by Nigerian law.
Platform safety — in cases of fraud investigation, we may share relevant data with relevant authorities.

6. Data retention

Active account data is retained for as long as your account remains active.
Placement and consent records are retained for 7 years for legal and audit purposes.
CV uploads and verification documents are deleted 90 days after account closure, unless retained for a pending dispute.
Session logs are retained for 12 months for security monitoring.

7. Your rights under the NDPA

As a data subject under the NDPA, you have the following rights:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your personal data (subject to legal retention obligations).
Right to restrict processing — request that we limit how we use your data while a concern is investigated.
Right to data portability — request your data in a structured, machine-readable format.
Right to withdraw consent — withdraw previously given consent at any time, without affecting the lawfulness of processing before withdrawal.
Right to object — object to processing based on legitimate interests.

To exercise any of these rights, contact us. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

8. Cookies and tracking

We use session cookies strictly necessary for platform operation (authentication, CSRF protection). We do not use third-party advertising cookies. Anonymous page-view analytics may be collected using privacy-respecting tools that do not track individual users across the web.

9. Security

We implement industry-standard security measures: TLS encryption in transit, encrypted storage for sensitive documents, bcrypt password hashing, and role-based access controls. We conduct regular security reviews. In the event of a data breach that poses a risk to your rights, we will notify you and the NDPC within 72 hours in accordance with the NDPA.

10. Children

The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has registered, we will delete their account and associated data promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and a notice on the Platform at least 14 days before taking effect. Continued use of the Platform after the effective date constitutes acceptance.

12. Contact

Data-related enquiries, rights requests, or complaints: Contact us

You may also contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you have unresolved concerns.