Privacy Policy

1 Who we are

Delon Jobs (jobs.delon.ng) is a job board and recruitment platform operated by Delon Outsourcing Solutions Limited, a company registered in Nigeria. In this policy, "we", "us", "our" and "Delon Jobs" refer to Delon Outsourcing Solutions Limited.

For the purposes of the Nigeria Data Protection Act 2023 (NDPA) and, where it applies, the EU/UK General Data Protection Regulation (GDPR), we act as the data controller for the personal data described in this policy.

2 Scope of this policy

This policy covers the Delon Jobs website, the accounts and dashboards behind it, and every service we provide through them. It applies to three groups of people:

• Job seekers — people who create a profile, build a résumé or apply for roles.
• Employers and recruiters — organisations and their staff who post jobs, buy subscriptions and review applications.
• Visitors — anyone browsing the site without an account.

Your use of Delon Jobs is also governed by our Terms and Conditions.

3 Information we collect

3.1 Information you give us

• Account details: first and last name, email address, phone number, password (stored only as a cryptographic hash, never in readable form) and the account type you select.
• Job seeker profile: professional title, profile summary, employment history, education, skills, projects, accomplishments, profile photo and any CV or supporting document you upload.
• Application content: the cover letter and CV attached to each application, and the roles you apply for.
• Employer details: company name, RC number, business address, postcode, industry, company description and contact information.
• Correspondence: messages you send through our contact form or by email.

3.2 Information we collect automatically

• Technical data: IP address, browser type and version, device and operating system, and language settings.
• Usage data: pages viewed, searches run, jobs opened, time spent on pages and referring URLs.
• Cookie data: as described in section 9.

3.3 Information from third parties

• Google Sign-In: if you register or log in with Google, we receive your name, email address and profile picture from Google. We never receive your Google password.
• Payment providers: our payment partners confirm to us whether a transaction succeeded, along with a reference and amount.

4 Why we process your information

Under the NDPA and GDPR we must have a lawful basis for every use of your data. Ours are set out below.

5 CVs, profiles and applications

This is the part of the service that matters most to job seekers, so we want to be precise about it.

• Applying is an active choice. Your CV and profile are only sent to an employer when you apply to one of their advertised roles. We do not push your profile to employers you have not applied to, and we do not operate a searchable CV database that employers can browse at will.
• What the employer sees. When you apply, the employer that posted the role receives your name, email address, the CV attached to the application and your cover letter, and is notified by email.
• What the employer can add. Employers can record an internal rating and private notes against your application, and can move it through statuses such as Reviewed, Shortlisted or Rejected. You are notified by email when your application is shortlisted or rejected.
• Withdrawing. You can delete an application from your dashboard. This removes it from our platform, but it cannot claw back information the employer has already downloaded or copied — at that point the employer is an independent data controller and you should contact them directly.

6 Obligations of employers

If you use Delon Jobs as an employer or recruiter, you become an independent data controller for the candidate data you receive, and you agree that you will:

• use candidate data only to assess that candidate for the role they applied for;
• not sell, rent, publish or otherwise pass candidate data to any third party;
• not add candidates to marketing lists or unrelated talent pools without their separate consent;
• keep candidate data secure, and delete it once your legitimate recruitment purpose has ended;
• comply with the NDPA, the GDPR where applicable, and all other relevant data protection and anti-discrimination law; and
• respond promptly to any candidate exercising their rights against you.

Misusing candidate data is a serious breach of our Terms and Conditions and will result in suspension or termination of your account without refund, and may be reported to the Nigeria Data Protection Commission.

7 How we share your information

We do not sell or rent your personal data. We share it only in the following circumstances:

• With employers — when you apply for their role, as described in section 5.
• With service providers — hosting and infrastructure, email delivery, payment processing and analytics providers who process data on our instructions and under contract.
• For legal reasons — where disclosure is required by law, court order, or a lawful request from a regulator or law enforcement agency, or to establish, exercise or defend legal claims.
• To protect people — where we reasonably believe disclosure is necessary to prevent fraud, or to protect the rights, safety or property of our users, the public or Delon Jobs.
• In a business transfer — if we are involved in a merger, acquisition or sale of assets, your data may transfer to the acquiring entity, which will remain bound by this policy or give you notice before anything changes.

8 Payments and billing data

Employer subscriptions are processed by third-party payment providers — currently Stripe and Flutterwave. Your card number, CVV and full payment credentials are entered on the provider's own secure checkout and are never transmitted to or stored on our servers.

We retain only what we need to run the account and meet our tax and accounting obligations: the plan purchased, the amount paid, applicable VAT, any coupon used, the transaction reference, the payment status and the date. Each provider processes your payment details under its own privacy policy.

9 Cookies and analytics

We use cookies and similar technologies in three categories:

• Essential cookies — session management, authentication and CSRF protection. The site cannot function without these, so they cannot be switched off.
• Analytics cookies — help us understand which pages and job categories are useful so we can improve them.
• Marketing cookies — used to measure and deliver more relevant advertising, including through Google AdSense.

You can accept, reject or customise non-essential cookies from the consent banner shown on your first visit, and you can change your mind at any time through your browser settings. Blocking essential cookies will prevent you from signing in.

10 How long we keep your data

We keep personal data only as long as we have a reason to:

11 How we protect your data

We apply technical and organisational measures appropriate to the sensitivity of recruitment data, including encryption of traffic in transit over HTTPS, one-way hashing of passwords, access controls that limit staff access to what their role requires, email verification on new accounts, rate limiting on login and registration, and regular review of our systems and dependencies.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission and affected users as required by law.

12 Your data protection rights

Subject to the conditions in applicable law, you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct data that is inaccurate or incomplete. Most of this you can do yourself from your profile and résumé pages.
• Erasure — ask us to delete your data where we no longer have a lawful reason to keep it.
• Restriction — ask us to pause processing while a dispute about accuracy or legitimacy is resolved.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
• Portability — receive the data you gave us in a structured, commonly used, machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting processing already carried out.
• Complain — lodge a complaint with a supervisory authority (see section 17).

To exercise any of these, email us at info@delon.ng. We respond within 30 days. We may ask you to verify your identity first, so that we do not disclose your data to somebody else.

13 International transfers

Some of our service providers — notably hosting, email and payment partners — operate outside Nigeria. Where we transfer personal data abroad, we take steps required by the NDPA and the GDPR to ensure it remains protected, including transferring only to countries with adequate protection or putting appropriate contractual safeguards in place with the recipient.

14 Children's data

Delon Jobs is intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it promptly.

15 Third-party links

Job listings and other pages may link to external websites, including employers' own application pages. We do not control those sites and are not responsible for their content or privacy practices. Read their privacy policies before providing them with personal data.

16 Changes to this policy

We may update this policy as our services and the law change. The current version always lives on this page with its effective date at the top. If a change materially affects your rights, we will give you notice by email or through a prominent notice on the site before it takes effect. Continuing to use Delon Jobs after a change takes effect means you accept the updated policy.

17 Contact and complaints

Questions about this policy, or want to exercise your rights? Get in touch:

Supervisory authority

If you are not satisfied with how we have handled your request, you have the right to complain to the Nigeria Data Protection Commission (NDPC). If you are in the EU or UK, you may instead complain to your local data protection authority.