Legal, Privacy & Compliance Center

1. Principles of Data Processing

All personal data collected across WORQ is processed lawfully, fairly, and transparently; collected for specific, explicit, and legitimate recruitment/marketplace purposes; adequate, relevant, and limited to what is necessary; accurate and kept up to date; and secured using high-grade encryption.

2. Categories of Data We Collect

• Identity & KYC Data: Full legal name, date of birth, government identification (National Identity Number / NIN, International Passport), and CAC business incorporation documents.
• Professional Dossier Data: Resumes, employment history, academic qualifications, verified trade certifications, and portfolio files.
• Financial & Payment Data: Paystack tokenized transaction references, wallet balances, bank account details for Nigerian NIP payouts. Card numbers are processed directly by licensed PCI-DSS Level 1 payment processors and never stored on WORQ servers.
• Geolocation & Telemetry: Approximate or exact service dispatch location (with explicit user permission) for dispatching local artisans.

3. Data Subject Rights (NDPA 2023)

Under the NDPA 2023, you are entitled to exercise the following statutory rights at any time via our Privacy Center:

• Right of Access: Request a complete digital copy of all personal records maintained by WORQ.
• Right to Rectification: Update inaccurate or incomplete biographical or professional details.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal identifiers, subject to statutory financial audit retention laws.
• Right to Restrict Processing: Request suspension of automated AI matchmaking or profiling.

4. Data Protection Officer (DPO) Contact

For privacy escalations or regulatory inquiries, contact our designated Data Protection Officer at: dpo@worq.ng.