1. Introduction

Surework (“we,” “us,” “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, transfer, and protect your personal information when you use the Surework platform, website, mobile application, and related services.

By using the Platform, you consent to the collection and use of your personal data as described in this Privacy Policy.

2. Types of Personal Data Collected

We collect the following categories of personal data:

• Personal Identifiers: Full name, address, phone number, email address, date of birth, and government-issued identification for verification.
• Account Information: Username, password, profile settings, and service preferences.
• Financial Information: Bank account details (for Service Providers receiving payments), payment card information (processed by secure third-party payment gateways), and transaction history.
• Service & Technical Data: Booking histories, rating feedbacks, communication logs between users, location data, IP addresses, and device/browser identifiers.

3. Legal Basis for Processing

We process your personal data under the following lawful bases of the NDPA:

• Consent: Where you have given explicit consent (e.g. for location tracking or marketing preferences).
• Contractual Necessity: For the performance of our contract with you (service delivery, payout processing).
• Legal Obligation: To comply with applicable financial, safety, or tax laws in Nigeria.
• Legitimate Interest: To maintain security, detect fraud, and continuously improve platform performance.

4. Data Sharing and Disclosure

We do not sell your personal data. We share your data only with other users (to facilitate service bookings), third-party payment processors (e.g., Paystack, Flutterwave), cloud hosting providers, and regulatory authorities where legally required.

Any cross-border transfer of personal data shall be executed in strict accordance with the NDPA and GAID requirements, ensuring appropriate safeguards including Standard Contractual Clauses.

5. Data Subject Rights

Under the NDPA, you have the following rights regarding your personal data:

• Right to access the personal data we hold about you.
• Right to request correction of inaccurate or incomplete data.
• Right to erasure (“Right to be Forgotten”), subject to legal and contractual retention requirements.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

6. Data Retention and Security

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. In accordance with general guidelines, personal data is not stored for more than six (6) months after the purpose of processing has been achieved, unless a longer retention period is required by law.

We implement appropriate technical and organizational measures to protect your personal data, including data encryption in transit and at rest, secure authentication, firewalls, and regular compliance audits.

7. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer: