Privacy Policy

Last Updated: 17 April 2025
‍

1. Introduction

Welcome to Gigson! This Privacy Policy explains how Devcenter Limited ("Devcenter", "we", "us", "our"), the owner and operator of the Gigson platform available at www.gigson.co ("Platform", "Service"), collects, uses, shares, protects, and otherwise processes your Personal Data when you use our Service.
‍

We are committed to protecting your privacy and handling your Personal Data in an open and transparent manner, in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable data protection laws.  
‍

This policy applies to:

  • Employers: Representatives of companies or individuals who register and use the Platform to find and connect with Candidates.
  • Candidates: Individuals (e.g., developers) who create profiles on the Platform to showcase their skills and experience to potential Employers.
  • Website Visitors: Individuals who browse our Website (www.gigson.co).
    ‍

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
‍

2. Data Controller

The Data Controller responsible for processing your Personal Data is:
Devcenter Limited
Email: privacy@devcenter.co


3. Information We Collect

We collect different types of Personal Data depending on your interaction with our Service:
‍

  • For Employers:
    • Account Information: Name, job title, email address, phone number, company name, password, and other details provided during registration.
    • Subscription & Billing Information: Subscription plan details, payment information (processed securely by our third-party payment processors), billing address, transaction history.
    • Usage Information: Searches performed, profiles viewed, profiles revealed (using Credits), communication logs with Candidates via the Platform, saved searches, notes, activity logs.
    • Communication Information: Records of your communications with us (e.g., support requests, feedback).
      ‍
  • For Candidates:
    • Profile Information: Name, contact details (email, phone number, location - optional fields clearly marked), professional experience, skills, education history, portfolio links, profile picture (optional), CV/resume uploaded by you, desired role types, availability, and any other information you choose to include in your profile.
    • Usage Information: How you interact with the Platform, profile views received, messages exchanged with Employers via the Platform, login history, activity logs.
    • Communication Information: Records of your communications with us.
      ‍
  • For Website Visitors:
    • Technical Information: IP address, browser type and version, device type, operating system, referral source, pages visited, time spent on pages.
    • Cookie Information: Data collected via cookies and similar tracking technologies (see Section 9: Cookies).
      ‍

4. How We Use Your Information and Legal Basis for Processing

We process your Personal Data for specific purposes and only when we have a valid legal basis to do so under the Nigeria Data Protection Act (NDPA) 2023. Below we describe the purposes for which we use your information and the legal bases we rely on:
‍

  • To Provide and Manage the Service: We use your Account Information, Profile Information, Subscription and Credit data, Usage Information, and Billing Information to operate the Gigson platform. This includes registering and managing your account, enabling Candidates to create and display their profiles, allowing Employers to search for and Reveal Candidate Profiles using Credits, facilitating communication between users via the Platform, and processing Subscription payments. The primary legal bases for these activities are the Performance of a Contract (fulfilling our obligations under the Terms of Use you agree to when using Gigson) and Consent (for specific actions like providing optional profile information or uploading a CV).
    ‍
  • To Communicate with You: We use your Account Information, Profile Information, and records of past communications to interact with you. This includes responding to your inquiries, providing customer support, and sending important service-related announcements about your account, subscription, or platform changes. We may also send you marketing communications about Gigson features or related services if you have opted-in to receive them. The legal bases for these communications are Performance of a Contract (for essential service communications), Legitimate Interest (for providing support and relevant service updates), and Consent (specifically for non-essential marketing emails, which you can opt-out of at any time).
    ‍
  • To Improve and Secure the Service: We use Usage Information, Technical Information, Cookie data, and feedback you provide to analyze how our Service is used, identify areas for improvement, develop new features, and enhance usability. We also process Account Information, Usage Information, and Technical Information to maintain the security and integrity of our Platform, prevent fraud, troubleshoot issues, and enforce our Terms of Use. The legal bases for these activities include our Legitimate Interest (in operating, improving, and securing our Service and business), Consent (for the use of non-essential cookies and analytics technologies), and potentially Legal Obligation (where specific security measures are legally required).
    ‍
  • To Comply with Legal Obligations: In certain situations, we may need to process your Personal Data (which could include any category of data we hold) to comply with applicable laws, regulations, court orders, or other legal processes, or to respond to lawful requests from public authorities. The legal basis for this processing is Legal Obligation.
    ‍

Where we rely on your Consent as the legal basis for processing, you have the right to withdraw that consent at any time. 1 Where we rely on Legitimate Interests, we have performed a balancing test to ensure our interests do not unduly override your rights and freedoms; you may have the right to object to processing based on our legitimate interests. Please see Section 8 ("Your Rights under the NDPA") for more information on how to exercise your rights.  

‍

5. How We Share Your Information

We do not sell your Personal Data. We share your information only in the following circumstances:
‍

  • Between Employers and Candidates: The core function of the Platform involves sharing Candidate profile information (after an Employer uses Credits to Reveal Profile) with Employers, and facilitating communication between them via the Platform. Employers' identities (company name, representative name) may be visible to Candidates they contact.
  • With Service Providers: We engage third-party companies and individuals to perform services on our behalf (e.g., cloud hosting providers like AWS or Google Cloud, payment processors like Paystack or Flutterwave, analytics providers like Google Analytics, email service providers). These providers have access to your Personal Data only to perform these tasks on our behalf and are obligated contractually (via Data Processing Agreements where required) not to disclose or use it for any other purpose.
  • For Legal Reasons: We may disclose your Personal Data if required to do by law, regulation, or legal process (e.g., subpoena, court order), or to respond to lawful requests from public authorities, including to meet national security or law enforcement requirements. We may also disclose information to protect the rights, property, or safety of Devcenter Limited, our users, or others.  
  • Business Transfers: If Devcenter Limited is involved in a merger, acquisition, financing due diligence, reorganiation, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your Personal Data may be transferred as part of that transaction, subject to standard confidentiality arrangements and notice where feasible/required.  
    ‍

6. Data Security

We implement appropriate technical and organiational measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthoried disclosure, or access. These measures include encryption, access controls, secure networks, and staff training. However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.  
‍

7. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal requirements).
‍

  • Account Data (Employers & Candidates): Retained for the duration of your active account/subscription and for a reasonable period thereafter (e.g., to allow account reactivation or comply with legal obligations).
  • Candidate Profile Data: Retained while the Candidate account is active. Candidates can typically edit or delete their profile information.
  • Usage & Transaction Data: Retained as necessary for service provision, billing, security, and legal compliance.
  • Backup Data: May be retained for longer periods according to our backup schedules but isolated from regular processing.
    ‍

Upon expiry of the applicable retention period, we will securely delete or anonymise your Personal Data.


8. Your Rights under the NDPA

As a data subject in Nigeria, you have certain rights regarding your Personal Data under the NDPA. Subject to legal limitations and verification of your identity, these include:

  • Right to Access: You can request access to the Personal Data we hold about you.
  • Right to Rectification: You can request correction of inaccurate or incomplete Personal Data. (You can often update your own profile/account information directly).  
  • Right to Erasure (Right to be Forgotten): You can request deletion of your Personal Data under certain conditions (e.g., it's no longer necessary for the purpose, you withdraw consent and there's no other legal ground).
  • Right to Restrict Processing: You can request that we limit the processing of your Personal Data under certain circumstances.
  • Right to Data Portability: You can request to receive your Personal Data in a structured, commonly used, machine-readable format, and have the right to transmit that data to another controller where processing is based on consent or contract and carried out by automated means.  
  • Right to Object: You can object to the processing of your Personal Data where it's based on our legitimate interests or for direct marketing purposes.
  • Right related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (unless certain exceptions apply).  
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time (this won't affect the lawfulness of processing before withdrawal).
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been infringed. Contact details for the NDPC can be found on their official website.


To exercise any of these rights (except lodging a complaint with the NDPC), please contact us at privacy@devcenter.co. We will respond to your request within the timeframes stipulated by the NDPA.
‍

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like web beacons, pixels) to operate and analyse the Service, personalise your experience, and potentially for marketing purposes. Cookies are small text files stored on your device. We use:
‍

  • Essential Cookies: Necessary for the Platform to function (e.g., login sessions, security).
  • Performance/Analytics Cookies: Help us understand how users interact with the Service (e.g., Google Analytics).
  • Functionality Cookies: Remember your preferences (e.g., language).
  • Marketing Cookies: Used to deliver relevant advertising (if applicable).
    ‍

You can manage your cookie preferences through the cookie consent banner presented when you first visit our Website, or often through your browser settings. Blocking essential cookies may impact Platform functionality.


10. International Data Transfers

Your Personal Data may be processed and stored on servers located outside of Nigeria, where our service providers operate (e.g., cloud hosting). When we transfer your Personal Data outside Nigeria, we ensure appropriate safeguards are in place as required by the NDPA to protect your data. This may include transferring data to countries deemed adequate by Nigeria, using Standard Contractual Clauses approved by the NDPC, or obtaining your explicit consent after informing you of the risks.
‍

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page, updating the "Last Updated" date, and potentially via email or a notice on the Platform. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.  
‍

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer (or designated privacy contact) at:  
‍

Devcenter Limited
Attn: Privacy Team / Data Protection Officer
Email: privacy@devcenter.co

‍