Data Protection

Data Protection & Privacy Notice

Effective Date: August 2025Last Updated: August 2026

WORKONNECT AFRICA DATA PROTECTION & PRIVACY NOTICE

Workonnect Africa ("Workonnect", "we", "us", or "our") is committed to protecting the privacy, security, and rights of individuals whose personal information we collect and process through our technology platform.

Workonnect operates as an African-focused, internationally accessible recruitment and workforce technology platform. Accordingly, our data protection practices are designed to comply with applicable privacy and data protection laws in the countries and jurisdictions in which we operate.

This Notice explains how we approach the protection of personal information across our Platform and should be read together with our Privacy Policy, Cookie Policy, and Terms of Service.

1. OUR DATA PROTECTION COMMITMENT

Workonnect recognises that personal information belongs to the individuals to whom it relates. We are committed to:

  • Processing personal information lawfully, fairly, and transparently;
  • Collecting information only for legitimate and specified purposes;
  • Limiting collection to information reasonably necessary for those purposes;
  • Maintaining appropriate accuracy of personal information;
  • Protecting personal information against unauthorised access, loss, misuse, alteration, or disclosure;
  • Retaining personal information only for as long as reasonably necessary;
  • Respecting applicable data subject rights; and
  • Applying appropriate safeguards when personal information is transferred across borders.

2. WHERE OUR DATA PROTECTION OBLIGATIONS APPLY

Workonnect may operate across multiple African countries and may provide services to users, employers, recruiters, partners, and organisations located outside Africa.

Depending on where you are located, where our services are provided, and the nature of the processing involved, different data protection laws may apply. These may include, where applicable:

  • Nigeria's Nigeria Data Protection Act 2023 (NDPA);
  • The EU General Data Protection Regulation (GDPR) where applicable;
  • The UK General Data Protection Regulation and Data Protection Act 2018, where applicable;
  • Kenya's Data Protection Act 2019;
  • South Africa's Protection of Personal Information Act (POPIA);
  • Ghana's Data Protection Act 2012;
  • Rwanda's applicable data protection legislation;
  • Uganda's Data Protection and Privacy Act 2019; and
  • Other applicable national, regional, or international data protection laws.

The specific rights available to you may depend on the jurisdiction applicable to your personal information.

Where a local law provides stronger or additional protections, Workonnect will apply those requirements where legally applicable.


3. INFORMATION WE MAY COLLECT

Depending on how you use Workonnect, we may collect information such as:

Account Information

  • Name;
  • Email address;
  • Telephone number;
  • Location;
  • Login credentials;
  • Account preferences.

Professional Information

For job seekers and professionals:

  • CV/resume;
  • Employment history;
  • Education;
  • Skills;
  • Certifications;
  • Professional experience;
  • Career interests;
  • Portfolio information;
  • Professional profiles;
  • Job preferences; and
  • Other information voluntarily provided as part of a professional profile.

Employer Information

For employers and recruiters:

  • Organisation name;
  • Business contact information;
  • Job vacancy information;
  • Recruitment requirements;
  • Company profile;
  • Billing information; and
  • Other information necessary to provide recruitment services.

Verification Information

Where verification services are used, we may process information necessary to verify identity, education, employment, skills, qualifications, or professional credentials. The nature and extent of verification will depend on the service being used.

Technical Information

We may collect technical information such as IP address, browser type, device information, operating system, platform activity, approximate location, log information, and cookie and similar technology information. Further details are provided in our Cookie Policy.


4. HOW WE USE PERSONAL INFORMATION

We may process personal information to:

Create and manage accounts;
Provide recruitment and talent services;
Match candidates with employment opportunities;
Match employers with potential candidates;
Facilitate job applications;
Verify information;
Communicate with users;
Provide customer support;
Process payments;
Prevent fraud and abuse;
Maintain Platform security;
Improve our products and services;
Develop and evaluate AI-powered recruitment technologies;
Conduct analytics and research;
Send relevant service communications;
Send marketing communications where permitted;
Comply with legal obligations; and
Protect our rights and the rights of our users.

5. AI AND AUTOMATED PROCESSING

Workonnect uses artificial intelligence and automated technologies to support recruitment and workforce services. This may include processing information to:

  • Identify relevant skills;
  • Recommend job opportunities;
  • Recommend candidates;
  • Analyse job descriptions;
  • Identify potential matches;
  • Improve search and discovery;
  • Support recruitment workflows; and
  • Generate insights.

Human-in-the-Loop Principle:

AI-generated recommendations are intended to support—not replace—appropriate human decision-making. Where applicable law provides rights relating to solely automated decision-making or profiling, Workonnect will provide the rights and safeguards required by that law.


6. LEGAL BASES FOR PROCESSING

Depending on the jurisdiction and circumstances, Workonnect may process personal information on one or more lawful bases, including:

  • Consent;
  • Performance of a contract;
  • Taking steps at an individual's request before entering into a contract;
  • Compliance with a legal obligation;
  • Protection of vital interests;
  • Legitimate interests, where permitted by applicable law; and
  • Other lawful bases recognised under applicable legislation.

Where processing relies on consent, you may withdraw that consent subject to applicable legal and contractual limitations.


7. SHARING PERSONAL INFORMATION

We may share personal information where reasonably necessary to provide our services. This may include sharing information with:

Employers;
Recruiters;
Candidates;
Verification providers;
Technology service providers;
Payment providers;
Cloud hosting providers;
Communication providers;
Analytics providers;
Professional advisers;
Regulatory authorities;
Government agencies where legally required; and
Other service providers acting on our behalf.

We do not authorise recipients to use personal information for purposes unrelated to the services or purposes for which it was disclosed, except where permitted or required by law.


8. CROSS-BORDER DATA TRANSFERS

Because Workonnect operates across African and international markets, personal information may be processed or stored in a country other than the country in which you reside.

Where personal information is transferred across borders, Workonnect will take appropriate steps required by applicable data protection law to protect the information. Depending on the jurisdiction, safeguards may include:

  • Adequacy decisions;
  • Standard contractual clauses;
  • Appropriate contractual protections;
  • Data processing agreements;
  • Security measures; and
  • Other legally recognised transfer mechanisms.

9. DATA SECURITY

Workonnect implements reasonable technical and organisational measures designed to protect personal information. These measures may include:

Access controls;
Authentication mechanisms;
Encryption where appropriate;
Secure infrastructure;
Monitoring;
Backup procedures;
Security testing;
Staff confidentiality obligations; and
Incident response procedures.

No online system can guarantee absolute security.

Where a data breach occurs that triggers a notification obligation under applicable law, Workonnect will take the required steps to notify the relevant authorities and affected individuals within the applicable timeframe.


10. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

  • Providing our services;
  • Maintaining accounts;
  • Meeting contractual obligations;
  • Resolving disputes;
  • Preventing fraud;
  • Maintaining security;
  • Complying with legal obligations; and
  • Establishing or defending legal claims.

Retention periods may differ depending on the type of information and the jurisdiction involved.


11. YOUR DATA PROTECTION RIGHTS

Depending on the applicable law, you may have rights including:

Right to access your personal information;
Right to correct inaccurate information;
Right to request deletion;
Right to restrict certain processing;
Right to object to certain processing;
Right to withdraw consent;
Right to data portability;
Right to request information about our processing activities;
Rights relating to automated decision-making and profiling; and
Right to lodge a complaint with a relevant data protection authority.

Some rights are subject to legal exceptions and limitations.


12. EXERCISING YOUR RIGHTS

To exercise your applicable privacy rights, contact:

Workonnect Data Protection Team

Email: privacy@workonnect.africa

Subject: Data Protection Request

Please provide sufficient information for us to verify your identity and understand your request.

We may request additional information where reasonably necessary to protect against fraudulent or unauthorised requests.

We will respond within the timeframe required by applicable law.


13. DATA PROTECTION OFFICER

Where required by applicable law, Workonnect will appoint or designate an appropriate Data Protection Officer or privacy representative.

Data Protection Officer / Privacy Contact

Email: privacy@workonnect.africa


14. COMPLAINTS

If you have concerns about how Workonnect handles your personal information, we encourage you to contact us first so that we can investigate and address the matter.

You may also have the right to lodge a complaint with the relevant data protection supervisory authority in your country or jurisdiction.


15. CHILDREN'S DATA

Workonnect is primarily designed for employment, recruitment, and professional services.

We do not knowingly collect children's personal information in circumstances prohibited by applicable law.

Where a service is available to younger users, we will implement the age, consent, and other safeguards required by the applicable jurisdiction.


16. CHANGES TO THIS NOTICE

We may update this Notice periodically to reflect:

  • Changes to our Platform;
  • New products or services;
  • Changes to our data processing practices;
  • Changes in applicable laws;
  • Changes in technology; or
  • Changes in regulatory requirements.

The latest version will always be published on the Workonnect website with the relevant effective date.


17. CONTACT WORKONNECT

Workonnect Africa

© 2026 Workonnect Africa. All rights reserved.