Privacy Policy

1. Who we are

1.1Amana is the data controller in respect of personal data collected through our website, mobile application/portal, and offline vetting and onboarding processes. Our Data Protection Officer can be reached at amana.global2026@gmail.com.

2. Information we collect

2.1From Candidates, we collect: full name, contact details, National Identification Number (NIN), photograph, address, employment and reference history, guarantor details, police character certificate results, medical and drug screening results, bank account details for payroll, and Amana Academy training and certification records.

2.2From Clients, we collect: full name or corporate name, contact details, billing address, payment details, household or corporate staffing requirements, and any feedback, ratings, or incident reports submitted regarding a Candidate.

2.3From website and portal users generally, we collect: account registration details, device and browser information, IP address, and usage data collected through cookies and similar technologies, as further described in Article 8.

3. How we use your information

3.1We use personal data to:

1. vet, train, certify and match Candidates with Clients
2. process payroll, invoicing, and payments
3. administer contracts, including the Client Service Level Agreement and Candidate Service Agreement
4. provide customer support and respond to grievances or incidents
5. maintain the security and integrity of our platform
6. comply with applicable legal and regulatory obligations, including tax and labour law
7. with consent, send service updates, training content, and marketing communications.

4. Legal basis for processing

4.1We process personal data on the following legal bases under the NDPA: performance of a contract to which the data subject is party (e.g. the Candidate Service Agreement or Client Service Level Agreement); compliance with a legal obligation (e.g. statutory tax and pension remittance); consent (e.g. medical screening and marketing communications); and our legitimate interests in operating a safe, trustworthy staffing platform, balanced against the rights of the data subject.

4.2Medical and criminal record data are treated as sensitive personal data under the NDPA and are processed only with the Candidate's explicit, informed consent, obtained as part of the vetting process, and are retained and accessed subject to heightened safeguards.

5. Sharing of information

5.1We share personal data with the following categories of recipients, solely for the purposes described in this Policy:

• Strivo Global Ventures and other appointed background-check and legal vetting partners, for the purpose of conducting identity, criminal record and guarantor verification;
• our appointed medical vetting vendor, for the purpose of conducting medical and drug screening;
• Clients, who receive a redacted vetting summary and Academy certification status of a matched Candidate, but not raw medical or criminal-record documentation;
• payment processors and banking partners, for the purpose of processing fees, payroll and refunds;
• statutory and regulatory bodies, including tax and pension authorities, where required by law; and
• professional advisers (legal, audit, insurance) under obligations of confidentiality.

5.2We do not sell personal data to third parties. Any new category of data sharing not described in this Policy will require an update to this Policy and, where required by law, fresh consent.

6. Data retention

6.1We retain Candidate vetting records for the duration of the Candidate's active status in the Amana talent pool and for a period of five (5) years thereafter, to support re-engagement, dispute resolution, and legal compliance, unless a longer retention period is required by law or a shorter period is requested and legally permissible.

6.2We retain Client account and transaction records for the duration of the client relationship and for a period of six (6) years thereafter, in line with applicable tax and financial record-keeping obligations.

7. Data security

7.1We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including access controls, encryption of sensitive fields, and staff confidentiality obligations. No system is completely secure, and we encourage users to safeguard their own account credentials.

8. Cookies and similar technologies

8.1Our website and portal use cookies and similar technologies to enable core functionality, remember preferences, and understand usage patterns. You may control cookies through your browser settings; disabling certain cookies may affect portal functionality.

9. International transfers

9.1Personal data is primarily stored and processed within Nigeria. Where any service provider processes data outside Nigeria (for example, cloud hosting), we ensure such transfer complies with the cross-border data transfer requirements of the NDPA, including adequacy determinations or appropriate contractual safeguards.

10. Your rights

10.1Subject to applicable law, you have the right to:

1. access the personal data we hold about you
2. request correction of inaccurate or incomplete data
3. request erasure of your data, subject to our legal retention obligations
4. object to or restrict certain processing
5. withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal
6. lodge a complaint with the Nigeria Data Protection Commission.

10.2To exercise any of these rights, please contact our Data Protection Officer at the details in Article 1. We will respond within the timeframe required by the NDPA.

11. Children's data

11.1Where a Candidate's role involves childcare, we may process limited information about a Client's children (e.g. age, routines, allergies) strictly for the purpose of matching and safety, and only with the Client's consent. We do not knowingly collect personal data directly from children through our platform.

12. Changes to this policy

12.1We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify Candidates and Clients of material changes and indicate the "Last Updated" date above.

13. Contact us

13.1For questions about this Privacy Policy or our data practices, please contact us at amana.global2026@gmail.com.