Candidate Privacy Policy
Talent Acquisition | Nigeria Data Protection Act (NDPA) 2023 Compliant
Yandaz Nigeria Limited is committed to protecting the privacy and security of your personal data. This policy outlines how we collect, use, and safeguard the information of individuals who apply for employment or internships with us. In compliance with the Nigeria Data Protection Act (NDPA) 2023, this document serves as our formal notice to you regarding our data processing activities.
1. Scope and Applicability
This policy applies to all prospective employees, contractors, and interns who submit applications via the Yandaz careers portal, third-party job boards (e.g., Jobberman, LinkedIn), or physical submissions. It covers the entire recruitment lifecycle, from initial screening to the final employment offer or rejection notice.
2. Data We Collect and Process
📋 Core Identity
- Full Legal Name
- NIN (National Identity Number)
- Residential & Postal Address
- Phone & Email Contact
- Digital Identity (LinkedIn profile)
🎓 Professional History
- CV and Cover Letter
- Educational Certificates
- NYSC Discharge Certificate
- Professional Licenses
- Employment References
⚖️ Sensitive Information
- Criminal Record (where legal)
- Medical Fitness (post-offer)
- BVN (for ID verification only)
- Conflict of Interest declarations
3. Processing Sensitive Personal Data
Under the NDPA, "Sensitive Personal Data" includes information about your health, criminal record, or genetic data. Yandaz only processes this data where:
- We have obtained your explicit consent.
- It is necessary for the purposes of carrying out the obligations and exercising specific rights of Yandaz or you in the field of employment and social security law.
- The processing is necessary for the assessment of the working capacity of the candidate.
4. Use of Automated Tools and AI Screening
Yandaz utilizes technology to streamline the recruitment process. This includes:
- CV Parsing: Automatically extracting skills and experience from your documents.
- Candidate Ranking: Using algorithms to match candidate profiles against job descriptions.
Human-in-the-Loop Guarantee: We do not rely solely on automated decision-making. Every candidate who passes a technical threshold is reviewed by a member of our Talent Acquisition team before a final selection or rejection is issued.
5. International Data Transfers
Yandaz utilizes global cloud infrastructure (including Google Cloud and AWS) to manage recruitment data. Your information may be stored on servers located outside of Nigeria. We ensure that such transfers are conducted in accordance with the NDPA 2023, utilizing Standard Contractual Clauses (SCCs) and verifying that the destination country provides an adequate level of data protection.
6. Data Security and Confidentiality
We implement robust technical and organizational measures to protect your data, including:
- Encryption: Data is encrypted both at rest and during transit.
- Access Control: Only authorized HR personnel and hiring managers have access to candidate files.
- Audit Logs: We maintain logs of who accessed your data and for what purpose.
- Vendor Auditing: Third-party verification partners are audited for NDPA compliance before we share your data with them.
7. Your Legal Rights
As a Data Subject under Nigerian law, you have the following rights:
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
- Right to Erasure: You can request that we delete your application and all associated data.
- Right to Restriction: You can ask us to temporarily stop processing your data if you contest its accuracy.
- Right to Complain: You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
8. Retention and Deletion
We retain candidate data for a maximum of 24 months following the conclusion of the recruitment process. This allows us to contact you for future roles that may fit your profile. After 24 months, files are purged or anonymized. If you are hired, this data transitions into your Employee Personal File and is kept for the duration of your employment plus the statutory period required by Nigerian labor law.
