Legal
This Privacy Policy explains how Gig Oasis Limited collects, uses, stores, discloses, and protects personal data when you use our platform and related services.
Quick Navigation
Gig Oasis Limited operates a digital marketplace that connects independent professionals and clients. We respect your privacy and are committed to protecting personal data.
This Policy applies to our website, mobile applications, and related services. It is designed to align with the Nigeria Data Protection Act 2023, the Nigeria Data Protection Regulation 2019, and applicable international frameworks where relevant.
Enquiries and complaints can be directed to the DPO at contact@gigoasis.com or to dataprotection@gigoasis.com.
A. Information You Provide Directly
| Category | Examples |
|---|---|
| Account Information | Full name, email address, physical address, phone number, username, password, profile photo. |
| Identity Verification | NIN for proof of address, KYC and anti-fraud controls. |
| Profile and Listing Data | Skills, work history, portfolio samples, education, rates, project descriptions, and feedback. |
| Communications | In-platform messages, emails, support tickets, and survey responses. |
B. Information Collected Automatically
| Category | Examples |
|---|---|
| Usage Data | IP address, browser type, operating system, pages viewed, clicks, and visit timestamps. |
| Device Data | Mobile device ID, advertising ID, and push notification tokens. |
| Geolocation Data | Approximate location from IP address or precise location when GPS permission is enabled. |
C. Information from Third Parties
| Source | Examples |
|---|---|
| Background Checks | Identity verification and credential checks for Freelancers where lawful. |
| Payment Processors | Payment status confirmation and last four digits of payment methods. |
| Public Sources | Information from public social or professional profiles linked to your account. |
| Credit Bureaus | Credit checks for Nigerian Clients using payment plans or credit features. |
| Purpose | Legal Basis (NDPA / NDPR) |
|---|---|
| Facilitate contracts, matching, payments, and dispute resolution between Clients and Freelancers. | Contractual Necessity |
| Identity verification for fraud prevention, AML/CFT compliance, and account security. | Legal Obligation |
| Process payouts, invoices, and tax documentation, including withholding obligations. | Contractual Necessity / Legal Obligation |
| Account communication, service updates, and security alerts. | Contractual Necessity / Legitimate Interests |
| Analytics, trend analysis, and service improvement. | Legitimate Interests |
| Marketing communications where consent is required. | Consent |
| Compliance with subpoenas, court orders, and regulator directives. | Legal Obligation |
| Enforce Terms and protect rights, property, and user safety. | Legitimate Interests |
We do not sell personal data. Data sharing is limited to defined contexts.
| Recipient Category | Details |
|---|---|
| Between Users | Freelancer profile details may be shown to Clients. Client payment verification status may be shared with Freelancers. |
| Service Providers | Cloud hosting, payment processors, identity verification providers, customer support tools, and background check vendors. |
| Government and Regulators | Disclosures where required by law to CAC, FIRS, NDPC, EFCC, NFIU, and authorized bodies. |
| Corporate Transactions | Data may transfer during merger, acquisition, bankruptcy, or asset sale, subject to NDPA safeguards. |
Because the platform operates globally, data may be processed outside Nigeria, including in the United States and the United Kingdom.
In case of a qualifying breach, notifications are made to affected users and the NDPC within the legally required timeline.
| Data Category | Retention Period |
|---|---|
| Active Accounts | Retained for the duration of account activity. |
| Closed Accounts | Retained for 7 years after closure for tax, financial, and anti-money laundering compliance. |
| Financial Transaction Records | Retained for 7 years under applicable financial record requirements. |
| Identity Verification Data | Retained for 5 years after closure or as required by KYC obligations. |
| Communication Logs | Retained for 3 years after account closure. |
| Right | Description |
|---|---|
| Right to Access | Request a copy of personal data held about you. |
| Right to Rectification | Correct inaccurate or incomplete data. |
| Right to Erasure | Request deletion, subject to legal retention obligations. |
| Right to Restriction | Restrict processing while a claim or challenge is verified. |
| Right to Data Portability | Request a machine-readable copy of your data. |
| Right to Object | Object to processing based on legitimate interests or direct marketing. |
| Right to Withdraw Consent | Withdraw consent where processing relies on consent. |
| Right to Lodge a Complaint | Lodge complaints with the Nigeria Data Protection Commission. |
To exercise rights, submit a request through the Privacy Request Portal or send email to contact@gigoasis.com. Identity verification is required before processing rights requests, and responses are provided within 30 days.
We use cookies, web beacons, and similar technologies to support authentication, analytics, preferences, and advertising.
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Required for login, security, and payment functionality. |
| Performance / Analytics | Helps understand platform usage and improve service quality. |
| Functional | Remembers preferences such as language and region. |
| Targeting / Advertising | Delivers more relevant promotions on third-party platforms. |
Services are not intended for individuals under age 18. If data from a child is identified, it is deleted promptly.
Nigerian Users
This Policy is governed by Nigerian law, and disputes are subject to courts of Nigeria. NDPC reference: www.ndpc.gov.ng.
EU / UK Residents (GDPR)
Where applicable, GDPR rights and safeguards apply, including SCCs for international transfers and supervisory complaint rights.
California Residents (CCPA)
California residents may request data disclosures, deletion, opt-out rights where applicable, and non-discrimination for rights exercise.
For personal data exchanged during a specific Client-Freelancer contract, role allocation applies as follows:
| Role | Description |
|---|---|
| Platform Role | Acts as Data Processor for personal data exchanged in contract-related messages and work context. |
| Client Responsibility | Acts as Data Controller and must have lawful basis for sharing personal data with Freelancers. |
| Freelancer Responsibility | Uses data only for contract performance and deletes when no longer required, subject to retention rules. |
Gig Oasis