PRIVACY POLICY

Effective Date: November 11, 2025
Last Updated: November 11, 2025

1. INTRODUCTION

Welcome to Jobaa.org ("Jobaa," "we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job portal platform available across all African countries.

Jobaa.org
Acacia Mall
Kampala, Uganda
Email: [email protected]

By accessing or using Jobaa.org (the "Platform"), you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.

This Privacy Policy should be read in conjunction with our Terms and Conditions and any other policies referenced herein.

2. WHO WE ARE

Jobaa.org is Africa's leading job portal connecting job seekers with employers across all African countries. We operate as a technology platform facilitating employment opportunities and career development throughout the African continent.

Data Controller: For the purposes of applicable data protection laws, Jobaa.org acts as the data controller for the personal information we collect and process through the Platform.

Contact Information:

• Email: [email protected]
• Physical Address: Acacia Mall, Kampala, Uganda
• Data Protection Officer: Available upon request at [email protected]

3. INFORMATION WE COLLECT

We collect various types of information to provide, maintain, and improve our services. The information we collect includes:

3.1 Information You Provide Directly

Job Seeker Information:

• Account Information: Name, email address, password, phone number, date of birth, location (city and country)
• Profile Information: Professional headline, career summary, work experience, education, skills, certifications, languages, salary expectations
• Resume/CV: Your uploaded resume or CV documents in various formats (PDF, DOC, DOCX)
• Cover Letters: Cover letters and application materials you submit
• Job Preferences: Desired job titles, industries, locations, employment types, salary ranges
• Communication Data: Messages exchanged with employers through our platform
• Application History: Records of jobs you've applied to, saved jobs, and application status
• Identity Verification: Government-issued ID or documents if required for certain positions
• References: Professional references you choose to include

Employer Information:

• Company Details: Company name, registration number, business address, industry, company size
• Contact Information: Primary contact name, email, phone number
• Billing Information: Payment details for premium services (processed securely through third-party payment processors)
• Job Postings: Job descriptions, requirements, salary information, location, employment type
• Hiring Preferences: Candidate search criteria, hiring workflows, team member access
• Company Profile: Company description, mission, culture information, photos, benefits offered

3.2 Information We Collect Automatically

Usage Data:

• IP address and approximate geographic location
• Device information (type, operating system, browser type and version)
• Platform usage patterns (pages visited, features used, time spent)
• Search queries and job viewing history
• Application submission data and timing
• Click-through rates on job postings
• Email engagement metrics (opens, clicks)

Cookies and Tracking Technologies:

• Session cookies to maintain your login state
• Preference cookies to remember your settings
• Analytics cookies to understand platform performance
• Marketing cookies for targeted advertising (with your consent)
• Social media cookies when you interact with social sharing features

For more information about cookies, please see our Cookie Policy.

3.3 Information from Third-Party Sources

Social Media Integration:

• If you choose to link your LinkedIn, Facebook, or other social media accounts, we may collect profile information, work history, and connections from these platforms with your permission

Third-Party Services:

• Information from identity verification services
• Professional background checks (with your explicit consent)
• Employment verification data from previous employers
• Educational verification from institutions

Employer-Provided Information:

• Interview feedback and evaluations
• Hiring decisions and outcomes
• Performance-related data if you're hired through our platform

3.4 Sensitive Personal Information

We minimize the collection of sensitive personal information. However, in compliance with equal opportunity laws and to support diversity initiatives, we may collect (always with your explicit consent):

• Racial or ethnic origin (for diversity reporting)
• Disability status (to provide reasonable accommodations)
• Gender identity (for diversity statistics)

Important: This sensitive information is:

• Always optional to provide
• Never shared with employers unless you explicitly consent
• Used only for anonymized statistical reporting
• Stored with enhanced security measures

4. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

4.1 To Provide and Improve Our Services

• Job Matching: Connect job seekers with relevant employment opportunities based on profiles, preferences, and search behavior
• Profile Creation: Enable you to create and maintain professional profiles
• Application Management: Process and track your job applications
• Employer Services: Allow employers to post jobs, search candidates, and manage recruitment
• Communication: Facilitate communication between job seekers and employers
• Platform Enhancement: Improve features, functionality, and user experience
• Personalization: Customize content and recommendations based on your preferences

4.2 For Analytics and Research

• Analyze platform usage to understand trends and improve services
• Conduct market research on employment trends across African countries
• Generate anonymized statistical reports on job markets and hiring patterns
• Measure the effectiveness of our features and services

4.3 For Marketing and Communications

• Send you job alerts and notifications about relevant opportunities
• Provide updates about new features, services, and partnerships
• Send newsletters with career advice and industry insights
• Display targeted advertisements based on your interests (with consent)
• Promote premium features and subscription services

4.4 For Legal and Security Purposes

• Verify your identity and prevent fraud
• Detect and prevent security threats and abuse
• Comply with legal obligations and regulations
• Enforce our Terms and Conditions
• Protect the rights, property, and safety of Jobaa, our users, and others
• Respond to legal requests from authorities

4.5 With Your Consent

We may use your information for other purposes with your explicit consent, which you can withdraw at any time.

5. LEGAL BASIS FOR PROCESSING (APPLICABLE TO GDPR AND SIMILAR LAWS)

Where applicable data protection laws require a legal basis for processing personal information, we rely on the following:

• Contractual Necessity: Processing is necessary to provide our services under our Terms and Conditions
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving services, fraud prevention)
• Consent: You have given explicit consent for specific processing activities
• Legal Obligation: Processing is necessary to comply with legal requirements
• Vital Interests: Processing is necessary to protect someone's life or physical safety

6. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. We share your information only in the following circumstances:

6.1 With Employers (Job Seekers)

When you apply for a job or make your profile visible to employers:

• Your resume/CV, cover letter, and application materials
• Your contact information (email, phone number)
• Your profile information and work history
• Application date and status

Control Your Visibility: You can control your profile visibility settings and choose whether to apply publicly or anonymously (where supported).

6.2 With Job Seekers (Employers)

When you post a job or search for candidates:

• Company information and job postings are visible to job seekers
• Your contact information is shared with candidates who apply

6.3 With Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform:

• Cloud Hosting Providers: For data storage and platform infrastructure
• Payment Processors: For processing subscription and job posting payments
• Email Service Providers: For sending notifications and communications
• Analytics Providers: For platform analytics and performance monitoring
• Customer Support Tools: For providing user assistance
• Security Services: For fraud detection and prevention
• SMS Providers: For sending text message notifications

All service providers are contractually bound to protect your information and use it only for specified purposes.

6.4 For Legal Reasons

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal processes, court orders, or government requests
• Enforce our Terms and Conditions
• Protect the rights, property, or safety of Jobaa, our users, or the public
• Prevent or investigate fraud, security issues, or technical problems

6.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have.

6.6 With Your Consent

We may share your information with other parties when you provide explicit consent.

6.7 Aggregated and Anonymized Data

We may share aggregated or anonymized information that cannot identify you individually:

• Market research and employment trend reports
• Platform usage statistics
• Industry benchmarking data

7. INTERNATIONAL DATA TRANSFERS

7.1 Pan-African Operations

As a platform operating across all African countries, your personal information may be transferred to, stored, and processed in different African countries where Jobaa, its affiliates, or service providers operate.

7.2 Data Transfer Safeguards

When transferring personal data internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by relevant data protection authorities
• Ensuring recipients comply with recognized data protection frameworks
• Conducting due diligence on data security practices
• Implementing technical and organizational security measures

7.3 Your Rights Regarding International Transfers

You have the right to:

• Request information about international data transfers
• Obtain copies of safeguards in place
• Object to transfers in certain circumstances

7.4 Data Protection Laws

We comply with applicable data protection laws including:

• African Union Convention on Cyber Security and Personal Data Protection
• Individual country data protection regulations (e.g., Nigeria Data Protection Regulation, South Africa POPIA, Kenya Data Protection Act)
• International standards where applicable

8. DATA RETENTION

8.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Job Seeker Data:

• Active Accounts: Retained while your account is active
• Inactive Accounts: If your account is inactive for 3 years, we may delete or anonymize your data after providing notice
• Deleted Accounts: Most data is deleted within 30 days, though some information may be retained for legal or security purposes

Employer Data:

• Active Accounts: Retained during active subscription
• Job Postings: Archived after expiration but may be retained for analytics
• Billing Records: Retained for 7 years for accounting and legal purposes

8.2 Legal and Legitimate Business Needs

We may retain certain information longer when required by law or for legitimate business purposes:

• Fraud prevention and investigation
• Resolving disputes and enforcing agreements
• Legal compliance and regulatory requirements
• Backup and disaster recovery (data in backups may persist longer)

8.3 Data Deletion Requests

You can request deletion of your personal information at any time. Please note:

• We will delete your data within 30 days of verification
• Some information may be retained as legally required
• Anonymized data may be retained for statistical purposes

9. YOUR PRIVACY RIGHTS

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

9.1 Access and Portability

• Right to Access: Request a copy of the personal information we hold about you
• Data Portability: Receive your data in a structured, commonly used, and machine-readable format
• How to Exercise: Log into your account or contact [email protected]

9.2 Correction and Updates

• Right to Rectification: Request correction of inaccurate or incomplete information
• How to Exercise: Update your profile directly or contact us for assistance

9.3 Deletion (Right to be Forgotten)

• Right to Erasure: Request deletion of your personal information
• Limitations: We may retain certain information where legally required or for legitimate purposes
• How to Exercise: Delete your account through settings or contact [email protected]

9.4 Objection and Restriction

• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Restriction: Request limitation of processing in certain circumstances
• How to Exercise: Contact [email protected] with your specific request

9.5 Withdraw Consent

• Consent-Based Processing: Withdraw consent for any processing based on your consent
• Effect: Does not affect the lawfulness of processing before withdrawal
• How to Exercise: Adjust settings in your account or contact us

9.6 Complaint Rights

• Right to Complain: Lodge a complaint with your local data protection authority
• Contact Your Authority: Find your local authority's contact information on their official website

9.7 Exercising Your Rights

To exercise any of these rights:

1. Email Us: [email protected] with your request
2. Verify Identity: We may need to verify your identity for security
3. Response Time: We will respond within 30 days (may be extended in complex cases)
4. No Fee: Exercising your rights is generally free unless requests are excessive or unfounded

10. DATA SECURITY

10.1 Security Measures

We implement robust technical and organizational measures to protect your personal information:

Technical Safeguards:

• Industry-standard encryption for data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Secure authentication mechanisms and password protection
• Regular security assessments and vulnerability testing
• Firewalls and intrusion detection systems
• Secure backup and disaster recovery procedures

Organizational Safeguards:

• Strict access controls and authorization procedures
• Employee training on data protection and security
• Confidentiality agreements with employees and contractors
• Regular security audits and compliance reviews
• Incident response and breach notification procedures

10.2 Payment Security

We do not store complete credit card information. Payment processing is handled by PCI-DSS compliant third-party payment processors who securely handle your payment data.

10.3 Your Responsibility

You play a crucial role in protecting your information:

• Use strong, unique passwords
• Keep your login credentials confidential
• Log out of shared or public devices
• Enable two-factor authentication if available
• Report suspicious activity immediately to [email protected]

10.4 No Absolute Security

Despite our efforts, no security measures are perfect or impenetrable. We cannot guarantee absolute security of your information. You use the Platform at your own risk.

10.5 Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you without undue delay (within 72 hours where required)
• Inform relevant data protection authorities as required
• Provide information about the breach and steps to protect yourself
• Take immediate action to contain and remediate the breach

11. CHILDREN'S PRIVACY

11.1 Age Restrictions

Jobaa is not intended for children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.

11.2 Parental Controls

If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly.

11.3 Reporting

If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected].

12. COOKIES AND TRACKING TECHNOLOGIES

12.1 What Are Cookies

Cookies are small text files stored on your device that help us provide and improve our services. We use cookies and similar technologies such as web beacons, pixels, and local storage.

12.2 Types of Cookies We Use

Strictly Necessary Cookies:

• Essential for platform functionality
• Enable login and account access
• Maintain security and prevent fraud
• Cannot be disabled

Performance Cookies:

• Help us understand how the platform is used
• Provide analytics on user behavior
• Identify areas for improvement
• Can be disabled

Functional Cookies:

• Remember your preferences and settings
• Enable personalized features
• Improve user experience
• Can be disabled

Marketing Cookies:

• Deliver targeted advertisements
• Track advertising effectiveness
• Provide relevant content
• Require consent and can be disabled

12.3 Third-Party Cookies

We may use third-party services that set their own cookies:

• Google Analytics for platform analytics
• Social media platforms for sharing features
• Advertising networks for targeted ads

12.4 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to refuse or delete cookies
• Cookie Preferences: Manage your cookie preferences in your account settings
• Opt-Out Tools: Use industry opt-out tools for advertising cookies

Note: Disabling certain cookies may affect platform functionality.

12.5 Do Not Track

Some browsers have "Do Not Track" features. Currently, there is no standard for responding to these signals, but we respect your privacy choices.

13. THIRD-PARTY LINKS AND SERVICES

13.1 External Websites

The Platform may contain links to third-party websites, plug-ins, and applications. We are not responsible for the privacy practices or content of these external sites.

13.2 Third-Party Responsibility

When you click on third-party links or use third-party services:

• You leave our Platform
• Their privacy policies govern data collection and use
• We have no control over their practices
• We recommend reviewing their privacy policies

13.3 Social Media Features

Our Platform may include social media features (e.g., sharing buttons). These features may collect your IP address and set cookies. Your interactions are governed by the privacy policies of the respective social media companies.

14. MARKETING COMMUNICATIONS

14.1 Types of Communications

We may send you:

• Transactional Emails: Account notifications, application confirmations, password resets (cannot opt-out)
• Job Alerts: Notifications about relevant job opportunities (can opt-out)
• Newsletters: Career advice, industry news, and platform updates (can opt-out)
• Promotional Emails: Information about premium features and services (can opt-out)
• SMS Notifications: Job alerts and important updates if you opt-in (can opt-out)

14.2 Opting Out

You can opt-out of marketing communications:

• Email: Click "unsubscribe" in any marketing email
• Account Settings: Manage communication preferences in your profile
• SMS: Reply "STOP" to any SMS message
• Contact Us: Email [email protected] with your request

Note: You cannot opt-out of essential service communications related to your account.

14.3 Personalized Advertising

We may use your information to display personalized advertisements:

• On our Platform
• On third-party websites and social media
• Through email campaigns

You can opt-out of personalized advertising through:

• Your account privacy settings
• Browser cookie controls
• Industry opt-out tools (e.g., Digital Advertising Alliance)

15. AFRICAN DATA PROTECTION CONSIDERATIONS

15.1 Pan-African Compliance

Operating across all African countries, we comply with various national and regional data protection laws including:

• African Union Convention on Cyber Security and Personal Data Protection
• Nigeria Data Protection Regulation (NDPR)
• South Africa Protection of Personal Information Act (POPIA)
• Kenya Data Protection Act
• Ghana Data Protection Act
• Uganda Data Protection and Privacy Act
• Other applicable national regulations

15.2 Data Localization

Some African countries require or encourage data localization. Where required:

• We store and process data within the respective country
• We comply with local data transfer restrictions
• We work with local service providers when mandated

15.3 Cross-Border Data Flows

For pan-African services, we may transfer data between African countries. We ensure:

• Appropriate safeguards are in place
• Transfers comply with applicable laws
• Users are informed of data locations

15.4 Local Language Support

While this Privacy Policy is in English, we respect linguistic diversity. If you need assistance understanding this policy in another language, please contact us.

15.5 Mobile-First Considerations

Given high mobile internet usage across Africa:

• Our Platform is optimized for mobile devices
• We minimize data consumption where possible
• Mobile data charges may apply based on your provider
• SMS notifications available in areas with limited internet

16. CHANGES TO THIS PRIVACY POLICY

16.1 Updates and Modifications

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• New features or services
• Legal or regulatory requirements
• Industry best practices

16.2 Notification of Changes

When we make material changes, we will notify you:

• By email to your registered email address
• Through prominent notice on the Platform
• Via in-app notifications
• At least 30 days before changes take effect (where required)

16.3 Review and Acceptance

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Privacy Policy.

16.4 Version History

• Current Version: 1.0
• Effective Date: November 11, 2025
• Previous Versions: Available upon request

17. SPECIAL SITUATIONS

17.1 Job Applications and Hiring

For Job Seekers: When you apply for a job through Jobaa:

• Your application is sent directly to the employer
• The employer becomes a data controller of your information
• Employer's privacy practices govern their use of your data
• We track application status for your convenience

For Employers: When you receive applications:

• You become a data controller for applicant information
• You must comply with applicable employment and data protection laws
• You must handle applicant data securely and legally
• You are responsible for your hiring practices and decisions

17.2 Resume Databases

Premium Resume Search: Employers with premium access can search our resume database:

• Only profiles set to "visible" or "searchable" are included
• You control your visibility settings
• Employers cannot download or export data without applying proper safeguards
• We monitor for abuse and inappropriate use

17.3 Background Checks

If an employer requests a background check:

• They must obtain your explicit consent
• We may facilitate the process with third-party providers
• You have rights regarding the results
• Background check providers have their own privacy policies

17.4 References and Recommendations

If you provide references:

• Ensure you have permission to share their contact information
• Reference contacts may be contacted by employers
• Their responses are governed by employer privacy practices

18. CONTACT US

18.1 Privacy Questions and Requests

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Subject Line: Privacy Inquiry - [Your Name]

Physical Address:
Jobaa.org
Legal Department
Acacia Mall
Kampala, Uganda

Office Hours: Monday - Friday, 9:00 AM - 5:00 PM (East Africa Time)

18.2 Data Protection Officer

To contact our Data Protection Officer:
Email: [email protected]
Subject Line: Attention: Data Protection Officer

18.3 Response Time

We aim to respond to all privacy inquiries within:

• Simple questions: 5-7 business days
• Data access requests: 30 days
• Complex requests: 45 days (with notification of extension)

18.4 Supervisory Authority

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. Contact information for African data protection authorities:

• Uganda: Office of the Data Protection and Privacy Officer
• Nigeria: Nigeria Data Protection Bureau (NDPB)
• South Africa: Information Regulator South Africa
• Kenya: Office of the Data Protection Commissioner
• Ghana: Data Protection Commission
• [Other relevant authorities based on your location]

19. ADDITIONAL INFORMATION

19.1 Automated Decision-Making

We may use automated systems to:

• Match job seekers with relevant opportunities
• Recommend candidates to employers
• Personalize content and suggestions
• Detect fraud and security threats

You have the right to:

• Request human review of automated decisions
• Understand the logic behind automated processing
• Object to automated decision-making in certain circumstances

19.2 Profiling

We may create profiles based on your:

• Job preferences and application history
• Skills and qualifications
• Platform usage patterns
• Search behavior

This helps us provide better job matches and personalized experiences. You can object to profiling by contacting us.

19.3 Research and Analytics

We may use anonymized or aggregated data for:

• Academic and market research
• Employment trend analysis
• Product development
• Industry reports and publications

This data cannot identify you personally.

GLOSSARY OF TERMS

Personal Information/Personal Data: Any information relating to an identified or identifiable individual.

Processing: Any operation performed on personal data, including collection, storage, use, and disclosure.

Data Controller: The entity that determines the purposes and means of processing personal data.

Data Processor: An entity that processes personal data on behalf of the data controller.

Data Subject: The individual to whom personal data relates.

Consent: Freely given, specific, informed, and unambiguous indication of agreement to processing.

Anonymization: The process of removing personally identifiable information so data cannot be attributed to an individual.

Encryption: The process of encoding information to prevent unauthorized access.

By using Jobaa.org, you acknowledge that you have read, understood, and agree to this Privacy Policy.

Last Updated: November 11, 2025
Version: 1.0

Thank you for trusting Jobaa with your personal information. We are committed to protecting your privacy and providing a secure platform for connecting talent across Africa.