Welcome Guest
Sign in to access your profile
Privacy Policy
v2.0 • Updated Sept 8, 2026
1. Overview & Scope
Legal applicability across web, mobile apps, and services
TASA Africa (“TASA”, “we”, “us”, or “our”) is committed to maintaining the trust and confidence of our users globally. This Privacy Policy applies to all individuals who access or use our services, including:
- Clients: Individuals or entities seeking freelance services, contracting talent, or making payments.
- Vendors / Freelancers: Professionals listing service offerings, building portfolios, or executing projects.
- Platform Visitors: Anyone browsing our web applications or downloading our mobile apps.
By accessing or using TASA Africa platforms, you acknowledge that you have read, understood, and agree to the data collection and processing practices described herein.
2. Legal Bases for Data Processing
Lawful grounds under NDPA 2023, GDPR Article 6, and international law
Processing necessary to fulfill service agreements between Clients and Vendors, handle escrow disbursements, and deliver platform functionality.
Where you provide clear affirmative consent for marketing communications, non-essential cookie tracking, or optional profile badges.
Compliance with Know-Your-Customer (KYC), Anti-Money Laundering (AML), tax reporting, Central Bank regulations, and NDPC statutory duties.
Protecting our platform against fraud, securing technical infrastructure, preventing account takeover, and improving marketplace UX.
3. Information We Collect
Granular breakdown for Clients, Vendors, and Mobile App users
A. Account & Identity Verification (KYC)
To build trust and comply with statutory financial requirements across Nigeria, Africa, and global markets, we collect:
- Full Legal Name, Email Address, Phone Number, Country of Residence.
- Government-issued ID documents (Passport, National Identity Number / NIN, Voter ID, BVN verification for payout compliance in Nigeria where required by financial regulators).
- Profile photographs, professional bio, and account authentication credentials.
B. Client vs. Vendor Specific Data
C. Mobile Application & Technical Telemetry
When accessing TASA Africa via our iOS/Android mobile applications or web apps:
- Device Information: Device hardware model, operating system version, unique device identifiers (IDFA/GAID), app version.
- Usage & Crash Metrics: Application event logs, crash reports, performance analytics.
- Location Data: Approximate location (via IP) for currency/locale setting; precise location only if voluntarily enabled for proximity-based vendor discovery.
- Push Notifications: Device tokens used to send project alerts, contract updates, and messaging notifications.
4. How We Use & Protect Your Information
Core operational purposes and safety mechanisms
5. Regional Privacy Laws & Addendums
Provisions tailored for Nigeria, Pan-Africa, Europe, UK, and North America
NIGERIANigeria Data Protection Act (NDPA 2023)
NDPC CompliantFor data subjects located in Nigeria, TASA Africa strictly complies with the Nigeria Data Protection Act 2023 (NDPA) and guidelines issued by the Nigeria Data Protection Commission (NDPC):
- Data Subject Rights: Right to object to processing, right to withdraw consent at any time without penalty, right to request restriction, and right to lodge a complaint directly with the NDPC.
- Lawful Safeguards: Personal data is processed in accordance with strict principles of accountability, data minimization, and purpose limitation.
- Cross-Border Data Transfers: Any transfer of Nigerian residents' data outside Nigeria is protected through adequate legal mechanisms in compliance with NDPA Section 41.
PAN-AFRICAPOPIA (South Africa) & AU Malabo Framework
African Union AlignedTASA Africa operates across the African continent and aligns with major national data privacy legislation and pan-African frameworks:
- South Africa (POPIA): Compliance with the Protection of Personal Information Act, ensuring conditionality for lawful processing of special personal information.
- Kenya & Ghana: Full alignment with Kenya DPA 2019 and Ghana Data Protection Act 2012 (Act 843).
- African Union Malabo Convention: TASA Africa upholds the principles of the AU Convention on Cyber Security and Personal Data Protection across all operating African jurisdictions.
EU / UKEU & UK General Data Protection Regulation (GDPR)
GDPR CompliantIf you reside in the European Economic Area (EEA) or the United Kingdom, you possess guaranteed legal rights under Articles 15-22 of the GDPR:
Transfers of EEA/UK data outside those regions utilize Standard Contractual Clauses (SCCs) approved by the European Commission.
UNITED STATESCalifornia Consumer Privacy Act (CCPA / CPRA)
No Data SellingFor California and US residents: TASA Africa DOES NOT sell or share your personal data for monetary or third-party commercial consideration. You have the right to request disclosure of categories of data collected, request deletion, and exercise rights without discriminatory service pricing.
8. Data Retention & Erasure Schedule
Clear timelines for data storage and deletion
We retain personal data only as long as necessary to fulfill marketplace contracts and comply with legal retention requirements:
| Data Category | Retention Period | Deletion Trigger |
|---|---|---|
| Active Profile & Portfolio Data | Duration of Active Account | Account Deletion Request |
| Financial & Escrow Invoices | 7 Years (Tax/CBN Law) | Statutory Tax Expiry |
| KYC Verification Documents | 5 Years post-account close | AML Statutory Expiry |
| Server Logs & Crash Telemetry | 90 Days | Automatic Log Rotation |
9. Data Security Architecture
Enterprise-grade encryption and technical safeguards
TASA Africa employs robust technical and organizational security measures:
- Encryption Standards: Data in transit is protected via TLS 1.3 encryption. Data at rest is encrypted using AES-256 standards.
- Access Control: Strict role-based access control (RBAC) and multi-factor authentication (MFA) for administrative operations.
- Vulnerability Monitoring: Continuous threat monitoring, annual penetration testing, and automated vulnerability scanning.
10. Children's Privacy (18+ Requirement)
Age restrictions on TASA marketplace platforms
TASA Africa services are strictly intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from minors under 18. If we discover an account registered by a minor, we will promptly close the account and remove associated data.
11. Contact Us
Exercise your rights under NDPA, POPIA, GDPR, or CCPA
If you wish to submit a Data Subject Access Request (DSAR), request profile deletion, or ask questions regarding data processing in Nigeria, Africa, Europe, or globally, contact our Data Protection Officer:
- Email: privacy@tasaafrica.com
- Address: Lagos, Nigeria
- Website: www.tasaafrica.com
Categories
For Clients
- How TASA Works
- Customer Success Stories
- Trust & Safety
- Quality Guide
For Vendors
- Become a TASA Vendor
- TASA for minors
- Vendor Support
- Vendor Resources
- Events