Privacy Policy
How changeworker handles your data - written plainly.
The short version: We only collect what we need to run changeworker. We never sell your data. You have full rights to access, correct, or delete your information. We comply with the Nigeria Data Protection Act (NDPA) 2023. Questions? Email privacy@changeworker.ng.
Overview & Commitment
This Privacy Policy explains how Impactpal Africa, operator of changeworker, collects, uses, stores, shares, and protects your personal data when you use our services at changeworker.ng.
changeworker is compliant with the Nigeria Data Protection Act (NDPA) 2023. Our designated Data Protection Officer (DPO) can be reached at privacy@changeworker.ng.
By using changeworker, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please discontinue use and contact us to request data deletion.
Data We Collect
We collect different categories of data depending on how you use changeworker:
Identity
- Full legal name
- Government-issued ID (NIN, Passport, Driver's Licence)
- Profile photograph
- Date of birth
- Gender (optional)
Contact
- Email address
- Phone number
- Physical address
- State/city of residence
Professional
- Work experience & history
- Educational qualifications
- Skills & certifications
- Portfolio samples
- Freelancer rates & availability
Organisational
- Organisation name and type
- CAC registration number
- Website & social profiles
- Mission statement
- Contact information
Transaction
- Project postings
- Hire decisions
- Payment amounts
- Escrow records
- Commission invoices
Technical
- IP address
- Browser type & version
- Operating system
- Cookie identifiers
- Session data
Communications
- In-platform messages
- Support tickets
- Email with changeworker
- Feedback & review text
Usage
- Search queries
- Pages viewed
- Feature interactions
- Error logs
- General diagnostics
We apply data minimisation - we only collect what is strictly necessary. We do not collect sensitive data such as biometric data, health information, or political opinions.
How We Collect Your Data
Direct Collection
Data you actively provide when you create an account, post a gig, make payments, send messages, submit verification documents, or complete feedback forms.
Automated Collection
Log data, device data, cookie data, and usage patterns collected automatically when you use the platform (see Section 6 for full cookie details).
Third-Party Sources
Transaction data from Paystack, general usage diagnostics, and reviews submitted about your account by other users.
How We Use Your Data
We do not sell, rent, or trade your personal data. We share data only in limited circumstances: with other platform users (profile information necessary for matching), with service providers (Paystack for payments, Firebase for infrastructure) under strict data processing agreements, for legal obligations, and in the event of a business transfer.
In the event of a merger or acquisition, we will notify you and provide an opportunity to delete your account before any transfer of data.
changeworker uses cookies to operate the platform, remember your preferences, and understand usage. Here is every cookie we use:
You can control cookies through your browser settings. Disabling Essential cookies will prevent the platform from functioning correctly.
Data Retention
We retain data only as long as necessary to fulfil the purposes in this Policy or as required by law. Key retention periods:
- Account data: duration of account + 2 years
- Transaction records: 7 years (FIRS legal obligation)
- Identity documents: duration of account + 1 year
- Support tickets: 3 years after resolution
- Analytics data: 26 months (anonymised thereafter)
When data is no longer needed, we securely delete or anonymise it.
Security
We implement appropriate technical and organisational measures including encryption at rest and in transit, role-based access controls, secure infrastructure, and monitoring.
No system is entirely secure. If you suspect your account has been compromised, contact us immediately at security@changeworker.ng.
Your Rights Under NDPA 2023
The Nigeria Data Protection Act 2023 grants you significant rights over your personal data:
Access
Request a copy of all personal data we hold about you.
Rectification
Correct inaccurate or incomplete data - many details can be updated in your dashboard.
Erasure
Request deletion where we have no legal basis for continued processing.
Restriction
Ask us to restrict processing while you contest accuracy or during a dispute.
Portability
Receive your data in a structured, machine-readable format.
Object
Object to processing based on legitimate interests, including profiling.
Withdraw
Withdraw consent at any time where processing is consent-based.
Complain
Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise your rights, email privacy@changeworker.ng with "Data Rights Request" as the subject. We respond within 30 days.
If we fail to address your request, you may complain to the Nigeria Data Protection Commission (NDPC) at ndpb.gov.ng.
Children's Privacy
changeworker is not intended for persons under 18. We do not knowingly collect data from minors. If you believe a child has provided data to us, contact privacy@changeworker.ng immediately.
International Data Transfers
changeworker primarily processes data within Nigeria. Where data is transferred outside Nigeria (via service providers), we ensure adequate safeguards including Standard Contractual Clauses and transfers only to countries with adequate data protection standards as recognised by the NDPC.
Changes to This Policy
We may update this Policy periodically. For material changes, we will email registered users and display a prominent banner for at least 14 days. Your continued use after the effective date constitutes acceptance.
Contact Us & DPO
For any privacy questions, requests, or concerns:
General
hello@changeworker.ngSecurity
security@changeworker.ngWe aim to respond to all privacy correspondence within 2 business days.
Your agreement
By using changeworker, you accept this Privacy Policy.
This Policy, together with our Terms & Conditions, governs how we handle your personal data.