Legal
Privacy Policy
Effective date: 4 July 2025
This Privacy Policy explains how The HelpMate(“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use our platform — including our website, web application, and mobile application. We operate in compliance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).
1. Who we are
The HelpMate is a digital platform that connects employers with verified domestic workers across Nigeria, starting in Abuja (FCT). We act as the data controller for personal data processed through this platform.
Registered address: Abuja, Federal Capital Territory, Nigeria.
Data Protection Officer contact: info@thehelpmate.ng.
2. Data we collect
We collect different categories of data depending on your role:
Workers
- Full name, phone number, email address, date of birth, gender
- Current address and location (state, city, area)
- Profile photo
- Identity documents (NIN slip, voter's card, driver's licence, passport, or national ID card) — used solely for identity verification
- Address proof documents (utility bill, tenancy agreement)
- Background check records (outcome only; raw records held by the check provider)
- Skills, work history, and availability preferences
- Ratings and reviews left by employers
Employers
- Full name, phone number, email address
- Household or organisation location
- Subscription and billing information (payment tokens; full card numbers are never stored)
- Interview requests, hire records, and reviews written
Agents (recruiters / agencies)
- Full name, phone number, email address, business name
- Agency address and registration details
- Identity documents for KYC verification
- Billing and commission records
All users — automatically collected
- Device identifiers and push notification tokens (mobile app)
- IP address, browser/device type, and usage logs
- Session and authentication tokens
3. How we use your data
- Platform operation — creating and managing your account, matching employers with workers, facilitating interview requests and hire records.
- Identity & address verification — reviewing documents to issue Bronze, Silver, or Gold verification badges; documents are reviewed by authorised admin staff only.
- Background checks — sharing necessary data with our background-check provider under a data processing agreement, solely to produce a pass/fail outcome.
- Payments — processing subscription fees and placement commissions via our payment provider (Paystack).
- Notifications — sending SMS, email, and push notifications about account activity, interview requests, and platform updates. You can opt out of marketing notifications in your account settings.
- Safety & trust — investigating misconduct reports, resolving disputes, and enforcing our terms of service.
- Legal compliance — maintaining audit logs and records as required under Nigerian law, including the NDPA 2023.
- Platform improvement — aggregated, anonymised analytics to understand how the platform is used.
We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.
4. Legal bases (NDPA 2023)
We rely on the following lawful bases under the NDPA:
- Contract performance — processing necessary to provide the service you signed up for (account creation, matching, payments).
- Consent — for optional marketing communications and for processing sensitive data categories (e.g. NIN). You may withdraw consent at any time.
- Legal obligation — audit logging, data subject rights fulfilment, and compliance with regulatory requests.
- Legitimate interests — fraud prevention, platform security, and aggregated analytics, where these do not override your rights.
6. Retention
We retain personal data for as long as your account is active and for a period afterwards as required by law or legitimate business need:
- Account data — retained for the life of the account plus 1 year after deletion request.
- Identity and address documents — retained for 6 months after the verification decision, then permanently deleted. You may request earlier deletion.
- Audit logs — retained for 2 years as required for NDPA compliance.
- Payment records — retained for 6 years as required by Nigerian tax law.
Automated retention jobs run periodically to purge expired data. You can request deletion at any time (see Section 7).
7. Your rights
Under the NDPA 2023, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your data, subject to legal retention obligations.
- Restriction — ask us to pause processing while a dispute is resolved.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests or for direct marketing.
- Withdraw consent — at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, email info@thehelpmate.ng with the subject line “Data Subject Request”. We will respond within 30 days as required by the NDPA.
You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
8. Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS)
- Encrypted storage for sensitive documents
- Role-based access controls — only authorised staff can access verification documents
- Rate limiting and brute-force protection on authentication endpoints
- Regular security reviews and audit logging of sensitive operations
No system is 100% secure. If you believe your account has been compromised, contact us immediately at info@thehelpmate.ng.
9. Children
The main platform (worker profiles, employer accounts, agent accounts) is not directed at persons under 18. We do not knowingly collect personal data from minors for these purposes.
The HelpMate Mentorship Programmeaccepts applications for children under 18, but these applications are submitted by a parent or legal guardian on the child's behalf. The guardian's explicit consent is collected as part of the application process, and the child's data is used solely to administer the programme.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) and by displaying a notice in the app at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the current version.
Continued use of the platform after the effective date constitutes acceptance of the updated policy.
11. Contact us
For privacy-related queries, data subject requests, or to reach our Data Protection Officer:
The HelpMateEmail: info@thehelpmate.ng
