Ivynovahire respects your privacy. This Privacy Policy explains what personal data we collect, how and why we use it, who we share it with, and the rights you have. We process personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and the Nigeria Data Protection Regulation, and — where applicable to our international users — the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
1. Who We Are (Data Controller)
Ivynovahire is the data controller responsible for your personal data. For privacy questions or to exercise your rights, contact our Data Protection Officer using the details in the Contact section.
2. Personal Data We Collect
- Account & profile data: name, email, phone, username, password, country, profile photo, skills, portfolio and rates.
- Identity & verification data: government ID, proof of address and other KYC information where required (see AML/KYC Policy).
- Financial data: payout/payment details, transaction history and tax information, processed with our payment partners.
- Engagement data: job posts, proposals, messages, files, deliverables, reviews and dispute records.
- Technical & usage data: IP address, device and browser data, cookies, log data and usage analytics.
- Communications: support tickets and correspondence with us.
3. How We Use Your Data and Legal Bases
We use personal data to operate the Platform, relying on the following lawful bases (under NDPA/GDPR as applicable):
|
Provide the service |
Create accounts, match Clients and Freelancers, process payments and enable Engagements — performance of a contract. |
|
Verify & prevent fraud |
KYC, AML screening and security — legal obligation and legitimate interest. |
|
Communicate |
Service messages, support and important notices — contract / legitimate interest. |
|
Improve & secure |
Analytics, product improvement and platform security — legitimate interest. |
|
Marketing |
Optional updates and offers — consent, which you can withdraw at any time. |
|
Comply with law |
Tax, accounting, regulatory and lawful requests — legal obligation. |
4. Sharing Your Data
We share personal data only as needed, including with: other Users to the extent necessary for an Engagement; payment and KYC providers; hosting, analytics and communication vendors acting as our processors; professional advisers; and authorities where required by law. We do not sell your personal data.
5. International Data Transfers
Because we operate worldwide, your data may be transferred to and processed in countries other than your own, including outside Nigeria and the EEA. Where we transfer data internationally, we use appropriate safeguards required by the NDPA and GDPR, such as adequacy decisions or Standard Contractual Clauses.
6. Data Retention
We keep personal data only as long as necessary for the purposes described, to comply with legal, tax and accounting obligations, and to resolve disputes and enforce our agreements. When no longer needed, data is securely deleted or anonymised.
7. Your Rights
Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. Under CCPA/CPRA, California residents also have rights to know, delete, correct and to opt out of the “sale” or “sharing” of personal information; we do not sell personal data. You may lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local supervisory authority.
8. Security
We use technical and organisational measures — including encryption in transit, access controls and monitoring — to protect personal data. No system is perfectly secure, but we work to safeguard your information and to notify you and regulators of material breaches as required by law.
9. Children’s Privacy
The Platform is not intended for anyone under 18. We do not knowingly collect data from minors; if we learn we have, we will delete it.
10. Changes and Contact
We may update this Policy and will post changes with a new effective date. For any privacy question or request, contact our Data Protection Officer (see Contact).