Privacy Policy

1. Who We Are

HR Collective Ltd ("we", "us", "our") operates the HR Collective platform — an AI-powered marketplace connecting HR professionals with businesses. This policy explains how we collect, use, and protect your personal data when you use our platform.

2. Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, password (hashed), phone number.
• Professional profile data: CV, work history, qualifications, certifications, headshot, video interview recordings.
• Identity verification data: government-issued ID (processed by our third-party verification partner).
• Payment data: billing details processed securely via Flutterwave. We do not store card numbers.
• Usage data: pages visited, features used, device and browser type, IP address.
• Communications: messages sent within the platform workspace.

3. How We Use Your Data

• To provide and operate the platform and its features.
• To verify your identity and professional credentials.
• To match professionals with client requirements using AI.
• To process payments and maintain transaction records.
• To send service notifications, contract updates, and billing alerts.
• To improve our AI scoring models and matching algorithms.
• To comply with legal obligations (tax, fraud prevention, NDPR).

4. Legal Basis for Processing

We process your data on the following legal bases under the Nigeria Data Protection Regulation (NDPR) 2019:

• Contract performance: to deliver services you've agreed to.
• Consent: for marketing communications (you may withdraw at any time).
• Legitimate interests: platform security, fraud detection, and service improvement.
• Legal obligation: where required by Nigerian law.

5. Data Sharing

We share your data only where necessary:

• Clients: your approved professional profile (name, headline, AI report, rate) is visible to clients who hire you.
• Professionals: clients' company name and contact details are shared when a contract is formed.
• Service providers: Flutterwave (payments), identity verification partners, cloud hosting (AWS).
• We do not sell your personal data to third parties.

6. Data Retention

We retain your data for as long as your account is active. After account closure, we retain transactional records for 7 years to comply with financial regulations. AI interview recordings are deleted after 24 months.

7. Your Rights

Under the NDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, email us at privacy@hrcollective.io. We respond within 30 days.

8. Security

We use industry-standard security measures including TLS encryption, hashed passwords (bcrypt), and role-based access controls. All payment processing is handled by PCI-DSS compliant providers. We conduct regular security reviews.

9. Cookies

We use session cookies and local storage tokens for authentication only. We do not use advertising trackers or third-party analytics cookies.

10. Changes to This Policy

We may update this policy periodically. We will notify registered users by email of material changes at least 14 days before they take effect.

11. Contact

For privacy questions or to exercise your rights: