Last updated: 7 July 2026
This Privacy Policy explains how Pureworker Ltd ("Pureworker", "we", "us", "our") collects, uses, shares, and protects your personal data when you use our website (www.pureworker.com), our mobile applications, our WhatsApp service channel, and related services (together, the "Services"). It is issued in compliance with the Nigeria Data Protection Act, 2023 (NDPA) and its subsidiary instruments.
By using the Services, you acknowledge this Policy. If you do not agree with it, please do not use the Services.
Pureworker operates a marketplace that connects customers with verified service providers (artisans and skilled professionals) in Nigeria. We do not process payments: customers pay providers directly, and Pureworker never holds your money.
From customers: name; phone number (including your WhatsApp number when you message us); location or service area; the content of your service requests and your conversations with our WhatsApp assistant; ratings and feedback you give about providers; and support or complaint records.
From service providers and applicants: full name; phone/WhatsApp number; trade, skills and service categories; areas served; rates; years of experience; a description of your work; identity details for verification: your National Identification Number (NIN) is checked through a licensed identity-verification agent and we retain only the ID type and last four digits (we do not retain your full ID number or ID images after verification); a headshot photograph and photographs of your past work, which (with your consent, requested when you submit them) are published on your public Pureworker profile; reference contacts you provide (see below); and work history, job records and customer ratings accumulated through the platform.
From references: where a service-provider applicant lists you as a reference, we receive your name, relationship to the applicant, and phone number from the applicant. We use this information solely to verify the applicant, contact you only for that purpose, and delete it on the application's retention schedule.
From all users: technical data such as device information, IP address, log records, and (on the website) cookies (see Section 10); and your email address if you subscribe to updates.
We do not request or intentionally collect sensitive personal data (such as health, religious, or biometric information). Please do not include such information in your messages.
| Purpose | Lawful basis (NDPA) |
|---|---|
| Receiving your service request and connecting you with suitable verified providers | Performance of a contract / steps at your request |
| Verifying provider identity, skills and suitability | Legitimate interest (marketplace safety); consent of the applicant |
| Operating our WhatsApp assistant, including automated processing of your messages to understand your request (see Section 4) | Performance of a contract; legitimate interest |
| Post-service follow-ups, ratings and service-quality records | Legitimate interest (trust and safety) |
| Customer support, complaints and dispute records | Legitimate interest; legal obligation |
| Service updates you have subscribed to | Consent (withdraw any time by unsubscribing) |
| Compliance with law, regulation and lawful requests | Legal obligation |
When you message our WhatsApp number, your messages are processed by an automated assistant powered by artificial-intelligence technology in order to understand your request, ask clarifying questions, search our provider directory, and connect you with providers. This includes transmission of message content to our AI processing provider (see Section 6).
The assistant's task is matching and booking assistance only; it does not make legally significant decisions about you. A human team reviews complaints, provider applications, and any case the assistant cannot handle, and you may request human handling at any time by saying so in the chat.
Between users: when we connect you with a provider, we share with each party the information needed for the job: the provider's name, contact details, rates and ratings are shared with you; your name, contact details and the substance of your request are shared with the provider. From that point you communicate directly.
Service providers (processors) acting on our instructions:
| Processor | Purpose | Location |
|---|---|---|
| Supabase (on AWS) | Database and application hosting | Ireland (EU) |
| Meta Platforms (WhatsApp) | Message delivery over WhatsApp | United States |
| DeepSeek | Automated (AI) processing of message content | China |
| 360dialog GmbH | WhatsApp Business API connectivity (upon activation) | Germany |
| Prembly | Identity verification of service providers (NIN checks via licensed channels) | Nigeria |
| Cloudinary | Hosting of provider profile and verification images | United States |
Others: professional advisers, regulators, and law-enforcement where required by law; and a successor entity in the event of a business reorganisation, under this Policy's protections.
We do not sell your personal data.
Because the processors above are located outside Nigeria, your personal data is transferred to Ireland, the United States, China, and (upon activation) Germany. We effect such transfers in accordance with the NDPA, relying on contractual data-protection commitments with each processor and transfer safeguards recognised under Nigerian law. You may contact the DPO for more information about the safeguards applied to a specific transfer.
We retain personal data only as long as needed for the purposes above, per our internal Data Retention & Deletion Policy. In summary: WhatsApp conversation records are deleted 12 months after the conversation's last activity; service-introduction and rating records are anonymised after 24 months; unsuccessful provider applications are deleted after 6 months; ID images are not retained at all (reviewed and discarded at verification); operational logs are deleted within 90 days. Statutory record-keeping obligations may require longer retention of limited records.
Under the NDPA you have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request deletion; object to or restrict processing; data portability; withdraw consent at any time (where processing is based on consent) without affecting prior processing; and not to be subject to solely automated decisions with legal or similarly significant effect.
To exercise any right, contact the DPO at dpo@pureworker.com. We respond within 30 days. We may need to verify your identity before acting on a request.
You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng, though we would appreciate the chance to address your concern first.
We apply technical and organisational measures appropriate to the risk, including encryption of data in transit and at rest, access controls and authentication on our systems, audit logging, data minimisation by design (for example, retaining only the type and last four digits of verification IDs), and staff access limited to need. No system is perfectly secure; if a breach occurs that is likely to result in a risk to your rights, we will notify the NDPC and affected persons as required by the NDPA.
Our website uses cookies to keep you signed in, remember preferences, and understand site usage. You can decline or delete cookies in your browser settings; core parts of the website may not function without essential cookies. Our WhatsApp service does not use cookies.
The Services are intended for persons aged 18 and above. We do not knowingly process the personal data of children. If you believe a child has provided us personal data, contact the DPO and we will delete it.
We may update this Policy from time to time. The "Last updated" date above reflects the current version, and material changes will be highlighted on our website or communicated through the Services. Continued use after changes take effect constitutes acknowledgment of the updated Policy.
Pureworker Ltd (RC 7298244)
42, Gbola Kuforiji Olubi Drive, Adigbe, Abeokuta, Ogun State, Nigeria
Email: pureworker@pureworker.com · DPO: Gabriel Sobande, dpo@pureworker.com