Privacy Policy

01Introduction

Welcome to WorkChop.

WorkChop is a Nigerian technology and skills marketplace platform that connects customers seeking services ("Clients") with service providers ("Pros") who offer skills and services such as plumbing, electrical work, air-conditioning repair, maintenance, installation, cleaning, construction-related services, and other permitted services.

This Privacy Policy explains how WorkChop collects, uses, stores, shares, protects, and otherwise processes personal data when you use the WorkChop mobile application, website, and related services (collectively, the "Platform").

We are committed to handling personal data responsibly and in accordance with applicable Nigerian data-protection laws, including the Nigeria Data Protection Act 2023 ("NDPA"), together with applicable regulations, directives, and guidance issued by the Nigeria Data Protection Commission ("NDPC").

The NDPA requires personal data to be processed fairly, lawfully and transparently, for specific and legitimate purposes, with appropriate data minimisation, accuracy, storage limitation, security, accountability and duty of care.

Please read this Privacy Policy carefully. By registering for or using WorkChop, you acknowledge that you have read this Privacy Policy.

Where the law requires your consent for a particular processing activity, WorkChop will request that consent separately.

02Who Is Responsible For Your Personal Data?

For purposes of this Privacy Policy, WorkChop is the entity responsible for determining the purposes and means of processing personal data collected through the Platform, except where another party independently determines how your information is processed.

Where WorkChop engages a third-party service provider to process personal data on WorkChop's behalf, that provider may act as a data processor or other relevant service provider, depending on the nature of the relationship.

03What Is Personal Data?

Personal data means information relating to an identified or identifiable individual.

Depending on how you use WorkChop, this may include information such as your name, telephone number, identification number, location information, photographs, online identifiers, financial information, device information, and other information connected with your identity.

The NDPA's definition of personal data includes information linked to a person through identifiers such as a name, identification number, location data, or online identifier.

Certain categories of information receive additional protection under Nigerian law, including genetic and biometric information used for unique identification and other categories recognised as sensitive personal data under the NDPA.

04Information We Collect

We collect only information reasonably necessary for the operation, security, improvement, and lawful administration of WorkChop.

4.1 Registration and account information

When you create an account, we may collect:

• full name;
• telephone number;
• email address;
• date of birth or age information where required;
• profile photograph;
• residential or business address;
• user role;
• account login information;
• NIN;
• account status;
• registration date; and
• other information required to establish and manage your account.

05National Identification Number (NIN)

WorkChop requires users to provide a valid 11-digit National Identification Number (NIN) as part of its identity and account-verification process.

The NIN is a unique identification number used within Nigeria's national identity system and is used to establish or verify an individual's identity. NIMC describes the NIN as an 11-digit identifier associated with an individual in the National Identity Database.

5.1 Why we collect your NIN

• identity verification;
• preventing impersonation;
• preventing fraud;
• account security;
• marketplace trust and safety;
• compliance with applicable legal requirements;
• resolving disputes;
• protecting Clients and Pros; and
• maintaining records necessary to operate the Platform.

5.2 Manual identity verification

WorkChop's current identity verification process is a manual administrative review. An authorised WorkChop administrator may compare the information supplied by a user against information obtained through an applicable and lawfully authorised NIMC verification or identity-check process.

The WorkChop process currently described in this policy is not an automated NIMC government API integration. Where WorkChop later adopts an automated identity-verification service, this Privacy Policy may be updated and additional notices or consent may be provided where legally required.

5.3 ID Verified badge

Where WorkChop displays an "ID Verified" badge, the badge means that WorkChop completed its stated identity-verification process and obtained a satisfactory result at the relevant time. It does not mean that WorkChop guarantees:

• that the user will always provide truthful information;
• that the user is of good character;
• that the user is professionally qualified;
• that the user is licensed;
• that the user has no criminal history;
• that the user will not commit fraud; or
• that all information supplied by the user is permanently accurate.

WorkChop is not responsible for fraud committed through false, stolen, borrowed, manipulated, or otherwise fraudulent identity information supplied by a user, subject always to applicable law.

5.4 Protection of NIN

NIN information is treated as confidential personal data. We will not intentionally publish your full NIN on your public WorkChop profile.

We will limit access to NIN information to authorised personnel and service providers who reasonably require access for legitimate Platform, security, verification, compliance, or technical purposes. NIMC itself advises individuals to closely guard their NIN and not disclose it indiscriminately or publicly online.

06Pro Certificates and Verification Documents

Pros may voluntarily provide certificates, training records, professional qualifications, licences, portfolios, photographs of completed work, and other supporting documents.

WorkChop may review these materials to determine whether a "Certificate Verified" or similar badge should be displayed, for skill verification, marketplace trust, profile presentation, fraud prevention, dispute resolution, professional-quality assessment, and Platform safety.

WorkChop does not guarantee that every document submitted by a Pro is genuine or that a certificate guarantees competence. Where documents contain personal information belonging to another person, the user must have the appropriate authority to upload them.

07Location Data

WorkChop may collect or access location information from your device, including GPS or approximate location, depending on your device settings and permissions.

7.1 Why we use location data

• match Clients with nearby Pros;
• identify Pros within an appropriate service area;
• display relevant jobs;
• estimate service availability;
• improve job coordination;
• reduce travel time;
• support mapping functionality;
• identify potentially fraudulent account activity; and
• improve Platform performance.

During the initial operating model, WorkChop may generally use a 5–10 kilometre matching radius, subject to actual availability, location accuracy, the type of job, and Platform settings.

7.2 Challenge jobs

Certain administrator-posted "Challenge Jobs" may be available outside the normal geographical matching radius and may be open to Pros nationwide.

7.3 Location permissions

You may control location permissions through your mobile-device settings. Turning off location access may affect WorkChop's ability to provide location-based matching and other features.

08Information About Jobs and Transactions

When you use WorkChop, we may collect information relating to your activities on the Platform, including job descriptions, job locations, quotations, service prices, inspection requests, job status, completion confirmations, cancellations, transaction records, payment status, dispute records, ratings, reviews, messages between users, photographs, uploaded documents, support requests, and other records associated with a job.

This information allows WorkChop to operate the marketplace, maintain transaction records, provide customer support, resolve disputes, prevent fraud, and improve Platform functionality.

09Payment and Financial Information

WorkChop may collect or receive information necessary to process payments and payouts, including transaction references, payment status, amount paid, payment method, bank name, account name, account number or payout details provided by Pros, refund information, and other information necessary to process or reconcile transactions.

9.1 Card information

WorkChop does not intend to store complete payment-card information, such as full card numbers or CVV information, on its own systems.

Payments are processed through our third-party payment processor or another authorised payment processor used by WorkChop. Payment providers may collect and process payment information under their own privacy policies and terms.

WorkChop receives information needed to confirm and manage the transaction, but payment processing remains subject to the payment provider's systems and applicable financial regulations.

10Device and Technical Information

When you use WorkChop, we may automatically receive certain technical information, including device type, operating system, application version, IP address, device identifiers, browser information, network information, crash reports, timestamps, login records, security events, and technical diagnostics.

We use this information to maintain the Platform, diagnose errors, improve performance, prevent fraud, protect accounts, investigate security incidents, understand Platform usage, and improve user experience.

11Communications

Where WorkChop provides messaging or communications functionality, we may process messages, attachments, job-related communications, support communications, communication timestamps, and related metadata to deliver communications, provide customer support, resolve disputes, prevent abuse, investigate fraud, enforce Platform rules, and maintain transaction records.

Users should not use WorkChop messaging to exchange passwords, sensitive credentials, confidential banking information, or other information that does not need to be shared.

12How We Use Your Personal Data

12.1 Providing the Platform

To create and manage accounts, match Clients and Pros, facilitate job engagements, process payments, manage quotations, support job completion, provide customer support, and maintain Platform functionality.

12.2 Identity and fraud prevention

To verify identity, prevent impersonation, identify suspicious activity, prevent fraudulent transactions, investigate abuse, and protect users.

12.3 Platform safety

To investigate complaints, manage disputes, identify abusive behaviour, enforce Platform rules, protect users and property, and respond to security incidents.

12.4 Service improvement

To analyse Platform usage, identify technical problems, improve user experience, improve matching, develop new features, and understand marketplace performance.

12.5 Legal and regulatory compliance

To comply with applicable law, respond to lawful requests, meet tax, accounting and audit obligations, cooperate with competent authorities where legally required, and establish, exercise, or defend legal claims.

12.6 Communications

To send account notifications, login and security alerts, job updates, payment notifications, dispute updates, verification messages, important service announcements, and other operational communications.

13Our Lawful Bases for Processing

The NDPA recognises several lawful bases for processing personal data, including consent, contractual necessity, legal obligation, vital interests, public interest, and legitimate interests, subject to the circumstances of the processing.

13.1 Contract

We may process information necessary to provide the WorkChop services you request and to perform our agreement with you.

13.2 Legal obligation

We may process information where necessary to comply with applicable Nigerian law or a lawful obligation.

13.3 Legitimate interests

We may process information where reasonably necessary for legitimate interests such as fraud prevention, cybersecurity, Platform safety, service improvement, dispute management, network security, business administration, and protecting the rights of users and WorkChop. We will consider whether our interests are appropriately balanced against your rights and freedoms.

13.4 Consent

Where consent is the appropriate lawful basis, we will request consent in a clear and meaningful way. You may withdraw consent where permitted by law.

Withdrawal of consent does not invalidate processing that occurred before withdrawal, and certain services may no longer be available where the relevant processing is necessary to provide those services.

14Data Minimisation

WorkChop aims to collect only information that is reasonably necessary for the purpose for which it is processed. We do not intend to collect personal data simply because it may be useful in the future.

Where information is no longer required and there is no lawful reason to retain it, we may delete, anonymise, or securely dispose of it.

15Who We Share Personal Data With

WorkChop may disclose or make personal data available to selected third parties where reasonably necessary. These may include:

15.1 Payment providers

For payment processing, payment confirmation, payout, reconciliation, fraud detection, and related financial services.

15.2 Identity verification providers or authorities

Where identity verification is required and legally authorised, WorkChop may share or verify relevant information with appropriate identity-verification providers, including NIMC or an authorised verification channel.

15.3 Technology service providers

Cloud hosting, database infrastructure, application hosting, communication services, analytics, security, mapping, authentication, customer support, monitoring, and technical maintenance.

15.4 Professional advisers

Lawyers, auditors, accountants, insurers, compliance advisers, and other professional advisers where reasonably necessary.

15.5 Government and competent authorities

Where required or authorised by law, court order, lawful regulatory request, law-enforcement process, or other legally recognised authority.

15.6 Corporate transactions

If WorkChop is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, personal data may be transferred as part of the relevant business assets or operations, subject to applicable law and appropriate safeguards.

16Sharing Information Between Clients and Pros

Because WorkChop is a marketplace, certain information must be visible to another user to enable a job. A Client may be shown a Pro's name, profile photograph, skills, skill level, verification badges, ratings, selected work history, approximate location or service area, and other profile information.

A Pro may receive information necessary to perform a job, including Client name, job description, service location, agreed job information, relevant photographs, and necessary communication details.

WorkChop will seek to limit what is disclosed to what is reasonably necessary for the relevant marketplace or job function.

17Public Profile Information

Certain information may be publicly displayed within the WorkChop Platform to help users select service providers, including first name or displayed name, profile image, skills, skill level, ratings, reviews, verification badges, job counts, selected portfolio material, and general service location.

WorkChop will not intentionally display a user's full NIN as part of a public profile.

18User-Generated Content

Users may provide photographs, reviews, job descriptions, portfolio information, certificates, comments, messages, and other materials.

By uploading information to WorkChop, you acknowledge that the information may be viewed by relevant users where necessary for the purpose for which it was submitted. You must not upload another person's personal information without the appropriate legal basis or authority.

19Cookies and Similar Technologies

Where WorkChop's website or services use cookies, software development kits (SDKs), pixels, device identifiers, analytics tools, or similar technologies, they may be used for authentication, security, preferences, functionality, analytics, performance monitoring, and service improvement.

Where applicable, users may manage cookie or similar technology preferences through available browser or Platform controls.

20Data Retention

WorkChop will retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted by applicable law. Different categories of information may be retained for different periods — for example, transaction information may be retained longer than ordinary profile information for accounting, tax, audit, fraud prevention, dispute resolution, legal claims, regulatory compliance, and enforcement of contractual rights.

When personal data is no longer required, WorkChop may delete, anonymise, aggregate, or securely dispose of it.

21Account Deletion

Users may request deletion of their WorkChop account through the available account settings or designated support channel.

WorkChop uses a soft-deletion approach — an account may be removed or disabled from ordinary user-facing functions while certain historical records remain retained for legal compliance, accounting, tax, payment reconciliation, fraud prevention, dispute resolution, security, audit, legal claims, or other lawful purposes.

Account deletion therefore does not necessarily result in immediate deletion of every record associated with the account.

22Data Security

WorkChop takes reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, disclosure, misuse, cyberattacks, and other unlawful processing — including access controls, authentication, encryption where appropriate, secure hosting, logging, monitoring, role-based access, backups, administrative controls, and security testing and updates.

No internet-connected system can be guaranteed to be completely secure. Accordingly, we cannot promise absolute security of your information.

23Employee and Administrator Access

WorkChop uses a separate internal administrative system to manage Platform operations. Authorised WorkChop staff may access personal information where reasonably necessary for identity verification, customer support, dispute resolution, fraud investigation, payment reconciliation, safety, account administration, legal and compliance purposes, or technical support.

Access should be limited according to personnel responsibilities and operational need.

24NIN Verification Data Access

Access to NIN and identity-verification information will be restricted to personnel and service providers who have a legitimate need to access it.

Where WorkChop uses an approved identity-verification service, we will use the service only for authorised purposes and in accordance with applicable contractual, regulatory, and data-protection requirements.

25Data Breaches

A personal data breach may occur where there is unauthorised access to, loss, destruction, alteration, disclosure, or similar compromise of personal data.

WorkChop will assess suspected breaches and take appropriate steps required by applicable law, including notification to the relevant authority or affected individuals where legally required, and take reasonable steps to contain the incident, investigate its cause, protect affected users, and prevent recurrence.

26Your Data Protection Rights

Subject to applicable law and relevant conditions or exceptions, you may have rights including:

• the right to be informed about how your data is processed;
• the right to request access to personal data held about you;
• the right to request correction of inaccurate or incomplete personal data;
• the right to request deletion in appropriate circumstances;
• the right to object to or restrict certain processing;
• the right to data portability where applicable;
• the right to withdraw consent where processing relies on consent;
• rights concerning certain automated decision-making; and
• the right to lodge a complaint with the Nigeria Data Protection Commission.

These rights are not absolute and may be subject to legal limitations — for example, WorkChop may need to retain certain records even after an account-deletion request where retention is required by law or necessary for legitimate legal, regulatory, fraud-prevention, accounting, or dispute-related purposes.

27How to Exercise Your Rights

To exercise a privacy right or ask a privacy-related question, contact:

Your request should include enough information for WorkChop to understand and verify the request. We will handle requests in accordance with applicable legal requirements.

28Complaints

We encourage users to contact WorkChop first so we can investigate and attempt to resolve privacy concerns. Where a user believes that their data-protection rights have been infringed, the user may also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or pursue another lawful remedy.

29Children and Minors

WorkChop is intended for persons who are 18 years of age or older. We do not knowingly design the Platform for children.

If we become aware that personal data belonging to a person below the applicable age has been submitted without appropriate legal authority, we may take reasonable steps to delete or restrict the information, subject to applicable law.

30International Data Transfers

Some WorkChop service providers may process personal data using infrastructure or service locations outside Nigeria. Where this happens, WorkChop will take steps required by applicable Nigerian data-protection law concerning lawful transfers and appropriate safeguards.

31Third-Party Links and Services

The Platform may contain links to or integrations with third-party services. A third party's privacy practices are governed by its own privacy policy and terms — WorkChop is not responsible for the privacy practices of third-party websites or services that it does not control.

32Payment-Processor Privacy

Payments may be processed by our third-party payment service provider or another approved payment provider. When you make a payment, the payment provider may separately process information about you in accordance with its own privacy policy and applicable law.

33Identity Verification Providers

Where WorkChop uses a third-party identity verification provider, including an authorised NIMC-related verification service or approved intermediary, the provider may process your identity information for the specific verification purpose, governed by appropriate contractual, technical, security, and data-protection safeguards.

34Automated Decision-Making

WorkChop may use technology to assist with job matching, search results, fraud detection, recommendations, account security, and Platform optimisation.

WorkChop does not intend for significant decisions about users to be made solely through automated processing where applicable law requires human intervention.

35Marketing

WorkChop may send promotional communications where permitted by law. Users may opt out of non-essential marketing communications using the unsubscribe mechanism provided or by contacting WorkChop. Operational messages necessary to provide the Platform may still be sent.

36Fraud, Security and Law-Enforcement Requests

WorkChop may process personal data to identify, investigate, prevent, or respond to fraud, identity theft, payment abuse, cyberattacks, account takeover, harassment, unlawful activity, abuse of the Platform, and threats to user safety.

Where legally required, WorkChop may disclose relevant information to law-enforcement bodies, courts, regulators, government authorities, or other competent authorities.

37Accuracy of Your Information

You are responsible for ensuring that information provided to WorkChop is accurate, complete, and up to date — particularly your NIN, name, phone number, email, bank/payout information, location, certification, and skills. Providing false information may result in account restriction or termination.

38Data Relating to Other People

You must not provide WorkChop with personal data relating to another person unless you have their permission or another lawful basis, are authorised to act for them, or the disclosure is otherwise permitted by law.

39User Responsibility for Account Security

You are responsible for keeping your password, PIN, verification codes, authentication credentials, device, and account information secure. Do not share authentication credentials with other people.

WorkChop will not ask you to disclose your password or one-time security code through an unsolicited message. Report suspected account compromise immediately.

40Changes to This Privacy Policy

WorkChop may update this Privacy Policy from time to time. Where appropriate, WorkChop will notify users through in-app notifications, website notices, email, account notices, or other reasonable means. Where applicable law requires fresh consent for a particular change, WorkChop will request it.

41Retention of This Policy

The latest version of this Privacy Policy will be made available through the WorkChop application and/or official website. The "Last Updated" date at the top of this page identifies the current version.

42Contact Us

43Important User Notice

By using WorkChop, you acknowledge that:

1. WorkChop collects personal information necessary to operate the marketplace.
2. WorkChop requires NIN information as part of its identity-verification process.
3. NIN verification is currently a manual administrative verification process and is not represented as an automated NIMC government API integration.
4. An "ID Verified" badge does not guarantee that a user is honest, qualified, licensed, competent, or safe.
5. WorkChop may collect location information for job matching and other Platform purposes.
6. WorkChop may process transaction, payment, account, device, communication, and job information.
7. Payment processing may involve Paystack or another approved payment provider.
8. Certain information may be shared with Pros, Clients, payment providers, identity-verification providers, technology providers, professional advisers, and competent authorities where reasonably necessary and legally permitted.
9. WorkChop uses reasonable technical and organisational measures to protect personal data but cannot guarantee absolute security.
10. You have rights in relation to your personal data under applicable Nigerian data-protection law.
11. Further information and updates will be provided through this Privacy Policy and relevant Platform notices.