Privacy Policy

1. INTRODUCTION

Welcome to HandiTaskNG Limited ("HandiTaskNG," "we," "our," or "us").

HandiTaskNG is a Nigerian technology company operating a secure digital marketplace that connects households, businesses and other service seekers ("Customers") with verified independent artisans and skilled professionals ("Service Providers") for the provision of home maintenance and repair services.

Our services currently include, but are not limited to:

• Generator installation, maintenance and repair;
• Air conditioning installation and servicing;
• Electrical installations and repairs;
• Plumbing services;
• Residential and commercial cleaning;
• Inverter and solar installation, maintenance and repair;
• Home appliance diagnosis and repair; and
• Other related home improvement and maintenance services that may be introduced from time to time.

HandiTaskNG is committed to protecting the privacy and security of the personal data entrusted to us. We process personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA), regulations and guidance issued by the Nigeria Data Protection Commission (NDPC), and internationally recognised privacy and information governance principles.

This Privacy Policy explains how we collect, use, disclose, store, transfer, retain and otherwise process personal data when you access or use our Platform.

2. OUR COMMITMENT TO DATA PRIVACY

HandiTaskNG recognizes that privacy is a fundamental right.

We are committed to ensuring that all personal data processed through our platform is handled lawfully, fairly, transparently, securely, and only for legitimate business purposes.

Our data processing activities are guided by the principles of:

• Lawfulness
• Fairness
• Transparency
• Purpose Limitation
• Data Minimization
• Accuracy
• Storage Limitation
• Integrity and Confidentiality
• Accountability

3. SCOPE OF THIS POLICY

This Privacy Policy applies to:

• Customers
• Artisans
• Independent Contractors
• Visitors to our Website
• Mobile Application Users
• Job Applicants
• Vendors
• Business Partners
• Customer Support Interactions

This Policy covers all information collected through:

• www.handitaskng.com
• Mobile Applications
• WhatsApp Business
• Email
• Telephone Calls
• Social Media Platforms
• Physical Verification Exercises
• Marketing Campaigns

4. DEFINITIONS

For purposes of this Policy:

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on personal data including collection, recording, storage, alteration, consultation, transmission, disclosure, restriction, deletion or destruction.

Customer means any individual requesting services through HandiTaskNG.

Service Provider means any artisan, technician or professional registered on the Platform to provide services.

Platform means the HandiTaskNG website, mobile application and related digital services.

5. THIRD-PARTY SERVICE PROVIDERS AND DATA PROCESSORS

HandiTaskNG engages carefully selected third-party service providers to support the delivery, security and continuous improvement of our Platform. These providers process personal data only for authorised purposes and under contractual obligations requiring appropriate technical and organisational measures to safeguard such data.

Our current third-party service providers include:

We may engage additional service providers where operationally necessary. Any such providers shall be required to comply with applicable data protection obligations and our information security requirements.

6. PERSONAL DATA WE COLLECT

Depending on your interaction with our Platform, we may collect:

A. Identity Information

• Full name
• Date of birth (where required)
• Gender (optional where appropriate)
• National Identification Number (NIN), where required for verification
• Passport photograph
• Government-issued identification documents

B. Contact Information

• Residential address
• Business address
• Email address
• Mobile telephone number
• Emergency contact information (where applicable)

C. Account Information

• Username
• Password (encrypted)
• Login credentials
• User preferences
• Profile information

D. Service Information

For Customers:

• Service requests
• Booking history
• Preferred service locations
• Reviews
• Ratings
• Communication history

For Artisans:

• Skills
• Professional qualifications
• Years of experience
• Certifications
• Work portfolio
• Areas of specialization
• Service availability

E. Verification Information

To enhance trust and platform integrity, HandiTaskNG may collect information necessary to verify the identity and eligibility of Service Providers. This may include government-issued identification, business registration documents where applicable, proof of address, references, and other verification records. Verification is conducted solely for legitimate business and security purposes.

F. Payment Information

Payments on the Platform are facilitated through secure third-party payment processors, including Paystack. HandiTaskNG does not store users' complete debit or credit card details on its systems. We may process or receive limited transaction information such as payment status, transaction references, amounts paid, and settlement confirmations necessary to administer bookings and resolve disputes.

7. PURPOSES OF PROCESSING PERSONAL DATA

We process personal data to:

• Create and manage user accounts.
• Match Customers with suitable Service Providers.
• Verify the identity of Service Providers.
• Facilitate bookings and service delivery.
• Process and reconcile payments.
• Manage escrow transactions through Paystack.
• Provide customer support.
• Communicate booking updates and service notifications.
• Improve platform functionality and user experience.
• Detects and prevents fraud, abuse, and unauthorized activities.
• Comply with legal and regulatory obligations.
• Resolve disputes between Customers and Service Providers.
• Conduct internal analytics and service improvements.
• Send marketing communications where lawful or with appropriate consent.

8. LEGAL BASES FOR PROCESSING

HandiTaskNG processes personal data on one or more of the following lawful bases under the Nigeria Data Protection Act, 2023:

• the data subject's consent;
• the necessity of processing for the performance of a contract;
• compliance with a legal obligation;
• the protection of vital interests;
• the performance of a task carried out in the public interest where applicable; and
• HandiTaskNG's legitimate interests, provided such interests do not override the fundamental rights and freedoms of the data subject.

9. INTERNATIONAL TRANSFERS OF PERSONAL DATA

HandiTaskNG may transfer, store or permit access to personal data outside the Federal Republic of Nigeria where necessary to provide our services or where our trusted technology partners operate internationally.

Personal data may be processed in jurisdictions including the European Union through Supabase, the United States through Google Workspace, and globally through Vercel's content delivery infrastructure.

Where personal data is transferred internationally, HandiTaskNG shall implement appropriate safeguards to ensure that such transfers comply with the Nigeria Data Protection Act, 2023. Such safeguards may include contractual data protection clauses, encryption, vendor due diligence, access controls, transfer risk assessments and any additional safeguards required under applicable law.

10. DISCLOSURE OF PERSONAL DATA

We may disclose personal data only where necessary to:

• Payment processors (including Paystack);
• Identity verification service providers;
• Cloud hosting and technology service providers;
• Professional advisers, auditors, and insurers;
• Law enforcement or regulatory authorities where legally required;
• Courts or tribunals pursuant to lawful orders; and
• Other third parties where disclosure is necessary for the operation of the Platform or with the user's consent.

All third parties engaged by HandiTaskNG are expected to maintain appropriate technical and organizational measures to safeguard personal data.

11. DATA SECURITY

HandiTaskNG implements reasonable and appropriate technical, administrative, and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption where appropriate, access controls, secure hosting environments, employee confidentiality obligations, periodic security assessments, and incident response procedures. While no method of transmission or storage is completely secure, we continuously review and enhance our safeguards.

12. DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal, regulatory, contractual, tax, accounting, and dispute resolution obligations, or as otherwise permitted by law. When personal data is no longer required, it will be securely deleted, anonymized, or destroyed.

13. CHILDREN'S PRIVACY

The HandiTaskNG Platform is intended for individuals who are eighteen (18) years of age or older.

We do not knowingly collect, process or solicit personal data from persons under the age of eighteen (18), except where such processing is authorised by law or supported by valid parental or guardian consent where required.

If we become aware that personal data relating to a child has been collected without an appropriate legal basis, we will take reasonable steps to securely delete such information without undue delay.

Parents or legal guardians who believe that a child has submitted personal data through the Platform may contact our Data Protection Officer for assistance.

14. YOUR RIGHTS

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data where appropriate;
• withdraw consent where processing is based on consent;
• object to certain processing activities;
• request restriction of processing in applicable circumstances;
• request portability of personal data where technically feasible; and
• lodge a complaint with the Nigeria Data Protection Commission if you believe your rights have been infringed.

Requests may be submitted through the contact details provided below. HandiTaskNG will respond within the timeframes prescribed by applicable law.

15. DATA BREACH MANAGEMENT

HandiTaskNG maintains documented incident response procedures for identifying, reporting, investigating, containing and mitigating actual or suspected personal data breaches.

Where a personal data breach is likely to result in a risk to the rights and freedoms of individuals, HandiTaskNG shall:

• promptly assess the incident and implement containment measures;
• investigate the cause and extent of the breach;
• document the incident and remedial actions taken;
• notify the Nigeria Data Protection Commission (NDPC) within 72 hours as prescribed under the Act;
• notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms; and
• implement corrective measures to prevent recurrence.

16. CONTACT US

For questions regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer Valerie Ehimhen via:

Email: dpo@handitaskng.com

17. CHANGES TO THIS POLICY

HandiTaskNG may amend this Privacy Policy from time to time to reflect changes in law, technology, or our business operations. Updated versions will be published on the Platform with a revised effective date. Continued use of the Platform after such publication constitutes acceptance of the revised Policy.

18. GOVERNING LAW

This Privacy Policy shall be governed by and construed in accordance with the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act, 2023, and any applicable regulations or guidance issued by the Nigeria Data Protection Commission.