JoberTrust Privacy Policy

1. About JoberTrust

JoberTrust is a professional trust and reputation platform designed to help people make more informed decisions before hiring, engaging, or transacting with service professionals.

Our platform allows users to:

• Search for professionals using names, phone numbers, professions, locations, and other identifying information.
• View professional profiles, reputation information, Trust Scores, and user-submitted reviews.
• View professional verification statuses and JoberTrust Checked Review indicators.
• Claim, update, or manage professional profiles.
• Submit reviews and supporting proof-of-work or proof-of-payment evidence regarding service professionals.
• Create and manage user or professional accounts.
• Complete identity and professional verification processes.

Some professional profiles may exist on JoberTrust even when the professional has not personally registered for an account. This is an important part of how JoberTrust operates as a public professional directory and reputation platform and is addressed further in Section 3.

Depending on the nature of a particular processing activity, JoberTrust may act as a data controller or, where applicable, a data processor.

2. Information We Collect

Depending on how you interact with JoberTrust, we may collect and process different categories of personal data.

2.1 Information You Provide When Creating an Account

When you register as a user or professional, we may collect:

• Full name
• Email address
• Phone number
• Password or authentication credentials
• Account type
• Country
• State and location information
• Profile photograph, where applicable
• Information required to provide account, verification, security, and platform services

2.2 Professional Profile Information

If you register or claim a professional profile, we may collect and publicly display information such as:

• Professional name and registered or trading business name
• Profession, category, specialization, and services
• Business address, operational location, and geographic service areas
• Professional biography
• Service descriptions
• Portfolio information
• Public business contact information
• Website and social-media links
• Business registration information
• Professional licences and certifications
• Verification status and applicable verification badges

Only information intended for public display will be made publicly available through a professional profile.

2.3 Supporting Review Evidence

When submitting a review, a user may voluntarily submit supporting evidence for consideration under the JoberTrust Checked Review process.

Examples may include:

Supporting evidence must reasonably relate to the review or transaction being described.

A receipt, payment record, or other document does not automatically make a review a JoberTrust Checked Review. JoberTrust may consider the relevance, consistency, completeness, and reliability of the evidence submitted before assigning the Checked designation.

Supporting evidence submitted for review checking is private. It is accessible only to authorised JoberTrust personnel involved in the relevant review and moderation process and is not displayed publicly or provided to the reviewed professional.

3. Public and Unclaimed Professional Profiles

JoberTrust may display public profiles for service professionals operating in Nigeria, including professionals who have not personally registered an account on the Platform.

3.1 Sources of Unclaimed Profiles

Unclaimed professional profiles may be created using information obtained from:

• Public directories
• Public business listings
• Publicly available online sources
• Information submitted by platform users
• Information previously provided directly by a business or professional

We seek to use information responsibly and to provide mechanisms through which professionals can claim, correct, or object to information associated with their profiles.

3.2 Purpose and Lawful Basis

Where applicable, JoberTrust may process information relating to public or unclaimed professional profiles on the basis of legitimate interests, including operating a professional trust and reputation directory, improving commercial transparency, reducing transaction fraud, and helping users make more informed decisions.

Any such processing remains subject to applicable data-protection requirements and the rights of data subjects.

3.3 Claiming a Professional Profile

If you are the professional represented by an unclaimed profile, you may request to claim and manage the profile by completing JoberTrust's applicable verification process.

Once successfully claimed, applicable features may allow you to:

• Correct inaccurate or outdated information
• Update business contact information
• Update services and location information
• Complete verification processes
• Respond to reviews
• Manage applicable profile information

Claiming a profile does not automatically result in a verification badge.

3.4 Objecting to or Requesting Removal of an Unclaimed Profile

If you are represented by an unclaimed professional profile and have concerns about the processing or publication of your personal data, you may contact JoberTrust to object to the processing or request correction, restriction, removal, or unindexing where applicable.

Requests should be sent to privacy@jobertrust.com using the subject line Unclaimed Profile Privacy Request.

To protect against fraudulent requests, we may require reasonable evidence establishing that you are the person or authorised representative of the professional or business concerned.

JoberTrust will assess valid requests in accordance with applicable law, the nature of the information involved, the purpose of the processing, and any applicable legal obligations or rights of other individuals.

4. Reviews, Rating Algorithms, and JoberTrust Checked Reviews

JoberTrust publishes reviews and ratings to help users evaluate service professionals.

Reviews must be based on genuine, first-hand interactions or transactions with the professional being reviewed.

4.1 Standard Reviews

Standard reviews are reviews submitted by eligible users that satisfy JoberTrust's applicable review requirements but do not receive the JoberTrust Checked designation.

Standard reviews carry a mathematical weight of 1 in applicable Trust Score calculations.

4.2 JoberTrust Checked Reviews

A JoberTrust Checked Review is a review for which supporting evidence has been submitted and reviewed through JoberTrust's checking process.

Where supporting evidence is accepted and the review receives the Checked designation, the review carries a mathematical weight of 2 in applicable Trust Score calculations.

The Checked designation means that JoberTrust has reviewed supporting evidence relating to the review under its checking process.

It does not mean that JoberTrust guarantees:

• The truth of every statement in the review
• The quality of the professional's work
• The safety of a transaction
• The professional's future conduct
• That every aspect of the underlying transaction has been independently verified by JoberTrust

The Checked designation is an additional trust signal intended to provide users with greater context when evaluating reviews.

4.3 Review Evidence

Evidence should reasonably correspond to the transaction, service, work, or experience described in the review.

Examples may include:

• Proof of payment
• Invoices
• Receipts
• Project photographs
• Work orders
• Delivery documentation
• Relevant service documents
• Other transaction-related evidence

JoberTrust may reject evidence where it is incomplete, unrelated, inconsistent, unreadable, altered, fraudulent, or otherwise insufficient for the checking process.

5. Phone Numbers and Indexing

Phone numbers may serve important functions within JoberTrust, including account authentication, verification, professional identification, duplicate prevention, and profile matching.

5.1 Internal Use

Phone numbers supplied during account registration, professional registration, review submission, or verification may be stored or processed internally for authentication, security, matching, fraud prevention, and platform integrity.

In certain circumstances, phone numbers may be hashed or otherwise transformed for internal processing.

5.2 Public Visibility

A private personal phone number collected solely for account authentication, recovery, or security purposes will not be intentionally displayed publicly as a personal contact number.

A phone number may be publicly displayed where it is designated as a public business or commercial contact number or is otherwise legitimately sourced from a public business listing.

6. Verification Data and Sensitive Information

JoberTrust may request information necessary to conduct applicable verification processes.

Depending on the verification level, this may include:

• Email verification
• SMS or phone verification
• Government-issued identification
• National Identification Number information
• Driver's licence
• International passport
• Corporate Affairs Commission registration documents
• Professional licences
• Trade certificates
• Other documents reasonably required for verification

6.1 Protection of Verification Documents

Government-issued identification documents, identification numbers, private utility bills, and similar verification materials are processed for verification and compliance purposes.

JoberTrust does not intend to publicly display sensitive government identification documents or identification numbers.

Where verification is successfully completed, public profiles generally display only the applicable operational verification status or badge.

7. Automatically Collected Technical Information and Cookies

When you access JoberTrust, our systems may automatically collect technical information such as:

• IP address
• Device and browser information
• Operating system information
• Access timestamps
• Referring URLs
• Page interactions
• Security and authentication logs
• Other technical information reasonably necessary to operate and secure the Platform

Cookies

JoberTrust may use cookies and similar technologies to:

• Maintain authenticated sessions
• Secure forms
• Prevent abuse
• Maintain user preferences
• Support platform functionality
• Understand platform usage where applicable

Disabling essential cookies may affect authentication and other core platform functionality.

8. Legal Bases for Processing

JoberTrust processes personal data on lawful bases recognised under applicable Nigerian data-protection law.

Depending on the circumstances, these may include:

Consent

Where you voluntarily provide consent for a particular processing activity, such as certain marketing communications or optional features.

You may withdraw consent where applicable, although withdrawal does not affect processing already carried out lawfully before withdrawal.

Contractual Necessity

Where processing is necessary to provide requested services, operate user accounts, provide verification functionality, or perform obligations under our Terms of Service.

Legal Obligation

Where processing is necessary to comply with applicable laws, regulations, lawful orders, regulatory requirements, or law-enforcement obligations.

Legitimate Interests

Where processing is necessary for legitimate interests such as:

• Platform security
• Fraud prevention
• Review integrity
• Abuse prevention
• Operating the public professional directory
• Protecting users and professionals
• Maintaining platform integrity

Where legitimate interests are relied upon, JoberTrust will consider applicable privacy rights and interests when determining whether the processing is appropriate.

9. Third-Party Data Sharing

JoberTrust does not sell, rent, or trade personal data as a commercial product.

We may disclose or provide access to personal data where reasonably necessary for legitimate platform operations, including to:

Infrastructure and Service Providers

Third-party providers supporting services such as:

• Cloud or hosting infrastructure
• Email delivery
• SMS and OTP services
• Database infrastructure
• Security services
• Technical maintenance
• Other services necessary to operate JoberTrust

Where applicable, such providers will be subject to contractual and data-protection obligations appropriate to the services they provide.

Legal and Regulatory Authorities

We may disclose information where required or permitted by applicable law, court order, regulatory requirement, or lawful request from an authorised authority.

Corporate Transactions

In connection with a merger, acquisition, restructuring, financing, asset sale, or similar corporate transaction, personal data may be transferred where legally permitted and subject to applicable privacy requirements.

10. Data Security and Storage Safeguards

JoberTrust maintains technical, organisational, and administrative measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction, misuse, or other unlawful processing.

Depending on the circumstances, safeguards may include:

• HTTPS/TLS encryption for data transmitted between users and the Platform
• Restricted administrative access
• Role-based permissions
• Secure password hashing
• Access controls
• Protected storage of uploaded files
• Database and security logging
• Vulnerability monitoring
• Security reviews and improvements
• Backup and recovery measures where applicable

JoberTrust continually reviews its security practices in light of evolving technological and operational risks.

10.1 Security Limitations

JoberTrust takes reasonable and appropriate technical, organisational, and administrative measures designed to protect personal data.

However, no method of transmitting, storing, or processing information over the internet can be guaranteed to be completely secure.

Despite the safeguards we implement, a security incident, cyberattack, system failure, unauthorised access, or other event may occur.

JoberTrust therefore does not guarantee that personal data will never be accessed, disclosed, altered, lost, or compromised as a result of an incident.

Nothing in this Privacy Policy is intended to exclude or limit any liability, responsibility, right, or obligation that cannot lawfully be excluded or limited under applicable law.

11. Personal Data Breach Response

If JoberTrust becomes aware of a personal data breach, we will take reasonable steps to:

1. Assess the nature and scope of the incident.
2. Identify the personal data and individuals potentially affected.
3. Contain and investigate the incident.
4. Take reasonable remediation measures.
5. Reduce the likelihood of further unauthorised access or harm.
6. Maintain appropriate records of the incident.
7. Notify the Nigeria Data Protection Commission where required by applicable law.
8. Communicate with affected data subjects where required by applicable law.

Where a breach is required to be reported to the Nigeria Data Protection Commission under applicable law, JoberTrust will comply with the applicable statutory notification timeframe.

Where a breach is likely to result in a high risk to the rights and freedoms of affected individuals, JoberTrust will communicate the breach to affected data subjects as required by applicable law.

JoberTrust's responsibility in connection with a security incident will be determined in accordance with applicable law and the specific circumstances of the incident.

12. Data Retention

JoberTrust retains personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing platform services
• Maintaining user and professional accounts
• Conducting verification
• Preventing fraud and abuse
• Resolving disputes
• Maintaining legitimate business records
• Complying with legal and regulatory obligations
• Protecting the integrity and security of the Platform

Where appropriate:

Active Accounts

Account information may be retained for the duration of an active account and for an appropriate period thereafter where necessary for legal, security, fraud-prevention, or operational purposes.

Verification Documents

Verification documents may be retained for the period reasonably necessary to complete the relevant verification, audit, compliance, security, or dispute process and in accordance with applicable retention requirements.

Fraud and Abuse Records

Fraud, abuse, security, and moderation records may be retained for a reasonable period necessary to prevent repeated abuse, investigate incidents, enforce platform rules, and meet legal obligations.

Retention periods may therefore vary depending on the type and purpose of the information.

13. Account Deletion and Anonymised Reviews

You may request deletion of your JoberTrust account, subject to applicable law and any lawful reasons for retaining particular information.

Because published reviews form part of the historical reputation record of the Platform, deleting an account does not necessarily result in the automatic deletion of every review previously submitted by that account.

Where appropriate and legally permissible, JoberTrust may anonymise published reviews by removing or separating identifying account information and displaying the reviewer as "Anonymous Reviewer."

Where information is retained for legitimate legal, security, fraud-prevention, dispute-resolution, or regulatory purposes, it may remain subject to restricted access for the applicable retention period.

14. Your Data Subject Rights

Subject to applicable law and statutory exceptions, data subjects may have rights including:

• The right to be informed about the processing of personal data
• The right to access personal data
• The right to request correction of inaccurate or incomplete information
• The right to request deletion or erasure in appropriate circumstances
• The right to restrict processing in appropriate circumstances
• The right to object to certain processing
• The right to data portability where applicable
• Rights relating to certain automated decision-making and profiling
• The right to lodge a complaint with the relevant supervisory authority

These rights are subject to applicable legal conditions, limitations, and exceptions.

To exercise a privacy right, contact privacy@jobertrust.com.

We may request reasonable information to verify your identity before processing a request.

JoberTrust will handle valid data-rights requests within the applicable statutory timeframe and in accordance with applicable law.

15. International Data Transfers

Some JoberTrust service providers or infrastructure may be located outside Nigeria.

Where personal data is transferred internationally, JoberTrust will take appropriate steps to ensure that such transfers are carried out in accordance with applicable Nigerian data-protection law and applicable requirements governing international transfers.

Depending on the circumstances, applicable safeguards may include an adequacy mechanism, contractual safeguards, consent where legally appropriate, or another lawful transfer mechanism recognised under applicable law.

16. Children's Privacy

JoberTrust is intended for individuals aged 18 years and older.

Individuals under 18 are not permitted to create JoberTrust accounts, register professional profiles, claim profiles, or submit reviews.

If JoberTrust becomes aware that personal data belonging to a minor has been collected in circumstances where it should not have been, we will take appropriate steps in accordance with applicable law.

17. Contact Details and Regulatory Authority

Data Protection Officer

The contact details of JoberTrust's formally designated Data Protection Officer will be maintained and published once the DPO appointment is completed.

Until then, privacy and data-protection enquiries may be directed to privacy@jobertrust.com.

Supervisory Authority

If you believe your personal data has been processed unlawfully or your privacy rights have not been satisfactorily addressed, you may contact the Nigeria Data Protection Commission (NDPC).

JoberTrust will cooperate with the Commission where required by applicable law.

18. Legal Disclaimer

JoberTrust operates as an independent professional trust, reputation, and review platform.

The existence of a professional profile, review, Trust Score, verification badge, or JoberTrust Checked Review does not constitute an endorsement, warranty, guarantee, or representation that a professional will provide satisfactory services.

Users should conduct their own appropriate due diligence before entering into professional, commercial, financial, legal, medical, property, or other transactions.

Nothing in this Privacy Policy is intended to remove or limit rights or protections that cannot lawfully be removed or limited under applicable law.