Privacy Policy

1. Who we are and what this policy covers

1.1 SkillConnect Ltd (SkillConnect, we, us) runs a marketplace that connects Customers with independent Vendors for weddings and other events across Nigeria. We provide the SkillConnect mobile app (including marketplace features and the Wedding Planner), the myskillconnect.com website and the guest Event Planner on the website.

1.2 This policy explains how we collect and use personal information about Customers, Vendors, people who contact us, visitors to our websites, guests whose details a User enters, and people who appear in User Content.

1.3 Which services this covers. This policy covers:

• the SkillConnect mobile app;
• the myskillconnect.com website, which does not take payments; and
• the Wedding Planner in the mobile app and the guest Event Planner on the website. Some features, such as saving a website plan to an account and sharing, are planned and not yet available. See our Wedding Planner Terms and Guest Data Notice.

1.4 Who is responsible. SkillConnect Ltd decides why and how it uses the information described in this policy, so it is the data controller for that information. The privacy contact for SkillConnect Ltd is Yvonne Ayogu. You can reach her at privacy@myskillconnect.com. This names her role for privacy enquiries; it is not a claim of a separate statutory designation beyond that contact role.

1.5 Registration. We will register with the Nigeria Data Protection Commission and appoint a Data Protection Officer where the law requires it of us, and we will keep this policy up to date with our registration details.

1.6 Capitalised terms have the meanings in our Terms and Conditions.

Identity verification for Vendors is carried out using YouVerify. SkillConnect reviews the results manually. Dojah is not an active provider. We share the information needed for the check with YouVerify so the check can be completed.

Back to top of Privacy Policy

2. Information we collect

2.1 Sensitive information. We do not ask for sensitive information (such as health, religion or political opinions) except where necessary. A User may enter such information about themselves or others in the planner or in messages. Sensitive personal data can be processed only on a condition listed in section 30 of the Nigeria Data Protection Act 2023 (NDPA), such as explicit consent. See our Wedding Planner Terms and Guest Data Notice.

2.2 Children. The Platform is for people aged 18 or over, and you must be at least 18 to create an account. We do not knowingly collect information from a child without the consent of a parent or guardian, as section 31 of the NDPA requires. If you think a child has given us information, contact us.

2.3 Information about other people. Where you give us information about someone else, such as a guest, you must have the right to do so.

A Vendor who wants the verified badge provides a NIN. We store the full number in SkillConnect’s AWS environment, together with the result of the check. We rely on your explicit consent, which you can withdraw at any time (the badge will then be removed). We use the NIN only to verify identity, to prevent fraud and to meet legal obligations. We limit access to people who need it for these purposes. We do not claim indefinite retention. We delete or de-identify the NIN when you close your account or withdraw consent. Where we still reasonably need the NIN after that to prevent fraud or to establish or defend a legal claim, we may keep it for a limited further period of up to 12 months and then delete or de-identify it. That 12-month outer limit is SkillConnect’s current operational target for those limited cases; it is not a period fixed by statute. Operational access controls, encryption and the scheduled deletion process for retained NIN records remain under active improvement; see section 8.

You can tell us what you think of the website and the guest Event Planner on our feedback page. Feedback is voluntary and you do not need an account. We ask which area you are reviewing, a rating from 1 to 5, what best describes your feedback and what we should improve first. You can add a comment if you want to. We also record a random feedback reference, the form version, which page you came from (for example planner budget) and a screen-size group from your viewport width only. If you ask for a reply, we ask for an email address or phone number and use it only to reply about that feedback. We do not use it for marketing or add it to a mailing list. Feedback is sent over HTTPS to SkillConnect’s private AWS storage for this website (API Gateway, Lambda and DynamoDB in SkillConnect’s AWS account). Authorised SkillConnect operators may export Excel-compatible CSV files for review. Amazon SES may email a notification to feedback@myskillconnect.com. Feedback is not public and is not stored in Microsoft OneDrive. We keep feedback only as long as we need it to review product issues and then delete or de-identify it; no fixed public retention period is promised beyond that operational need and any legal hold.

Back to top of Privacy Policy

3. Why we use information and our lawful bases

3.1 The NDPA requires a lawful basis for each use (section 25). The table sets out our purposes and bases.

3.2 Consent. Where we rely on consent, you can withdraw it at any time, and withdrawing it is as easy as giving it. Withdrawal does not affect earlier lawful use. Silence or a pre-ticked box is not consent (section 26 of the NDPA).

3.3 Legitimate interests. Where we rely on legitimate interests, we weigh them against your rights and interests, and you can object (section 10). We do not rely on legitimate interests where they override your rights or fall outside what you would reasonably expect.

3.4 Automated decisions. We do not make decisions that have legal or similarly significant effects on you solely by automated means. Fraud-prevention tools and verification checks may flag matters for human review, and a person makes decisions to restrict an account. We do not treat an AI detection score on its own as proof that evidence is false.

Back to top of Privacy Policy

4. Who we share information with

4.1 Other Users. If you make or accept a Booking, the other party sees information needed for it, such as your name, relevant contact details, and Booking details. Vendor profiles, portfolios and reviews are visible to others as the Platform shows. Do not put in your public profile information you want to keep private.

4.2 Service providers. We use providers for payments, hosting, identity verification, messaging and other services. Those that handle personal information for us do so under our instructions. See our Third-Party Service Providers Disclosure. Payment providers may act independently for some purposes under their own terms and privacy notices. This website does not currently send data to Google Analytics, Google Tag Manager, the Meta Pixel or Microsoft Clarity. Those website tools are prepared, and they stay switched off until they are approved, configured and tested, and until consent is in place. Mixpanel is used in the mobile app, not on this website. Our push notification service receives device information from the app where it is switched on.

4.3 Authorities and advisers. We may share information with courts, the police, regulators and other authorities where the law requires or allows, and with professional advisers, auditors and insurers under confidentiality.

4.4 Business changes. If SkillConnect merges, is sold or reorganised, information may be transferred to the new owner, who must respect this policy. We will tell you of significant changes.

4.5 We do not sell your personal information.

Back to top of Privacy Policy

5. How long we keep information

5.1 We keep personal information only as long as needed for the purposes above, including legal, accounting and evidence needs (section 24 of the NDPA).

5.2 We may keep information longer where the law requires, or where we need it to establish or defend a legal claim.

When you ask us to close your account, within five working days of a verified request we close the account and remove it from active systems so you can no longer sign in. That is not a promise that every backup copy is irreversibly destroyed within five working days. We may retain, delete or de-identify certain information where required for legal, financial, regulatory, fraud-prevention or Dispute resolution purposes — such as transaction records, payment information, verification records and records relating to unresolved Disputes — only for the periods in the table above. Backup media may retain residual copies until rotated.

Back to top of Privacy Policy

6. Where we keep information; transfers outside Nigeria

6.1 Our hosting provider (AWS) may store or process information outside Nigeria, including website feedback when that service is switched on. Mixpanel is used in the mobile app, not on this website, and may also store or process information outside Nigeria. This website does not currently send data to Google Analytics, Google Tag Manager, the Meta Pixel or Microsoft Clarity.

6.2 Where personal information is sent outside Nigeria, we will do so only as the NDPA allows (sections 41 to 43): where the recipient country or organisation gives adequate protection, or another listed condition applies, such as your informed consent or what is needed to perform a contract. We record the basis we rely on.

7. Cookies, analytics and similar technologies

7.1 This website does not currently send data to Google Analytics, Google Tag Manager, the Meta Pixel or Microsoft Clarity. Those website tools are prepared, and they stay switched off until they are approved, configured and tested, and until consent is in place. Google Tag Manager is the preferred Google path, with Google Analytics configured inside it rather than loaded a second time. Microsoft Clarity, when activated, loads only after analytics consent and is excluded from feedback, planner and account pages. Mixpanel is used in the mobile app, not on this website. Essential cookies needed to run the site do not need your consent.

7.2 Where we use non-essential cookies, such as analytics or advertising cookies, we will ask for your consent first through a clear banner or setting, and you can change your choice at any time.

7.3 In the mobile app we use Mixpanel for product analytics and push notifications. Where the law requires consent for them, we ask first. You can turn off push notifications in your phone settings.

Back to top of Privacy Policy

8. Security

8.1 We take reasonable steps to protect personal information, appropriate to the risk, as section 39 of the NDPA requires. We do not detail them here for security reasons. See our Security and Account Protection Policy.

8.2 No system is perfectly secure.

9. Data breaches

9.1 If a breach puts your personal information at risk, we will assess it and take the steps the law requires. Under section 40 of the NDPA we must notify the Nigeria Data Protection Commission within 72 hours of becoming aware of a breach likely to risk people’s rights and freedoms, and tell affected people where the risk is high. We keep a record of breaches.

10. Your rights

10.1 Subject to the law and its exceptions, you have the right to:

• be informed about how we use your information (this policy);
• access the personal information we hold about you, and get a copy;
• have wrong, outdated or misleading information corrected;
• ask for deletion where we no longer need the information or have no lawful basis to keep it;
• ask us to restrict use in certain circumstances;
• object to use based on legitimate interests, and to direct marketing;
• withdraw consent where we rely on it;
• not be subject to a solely automated significant decision (see section 3.4); and
• receive some information in a portable format, where the Nigerian regulations on portability apply.

These rights come from sections 34 to 38 of the NDPA.

10.2 How to use your rights. Write to privacy@myskillconnect.com with “Privacy request”. We may ask for proof of who you are. We will respond without undue delay, and tell you if we need more time or cannot comply and why. We will not charge unless the law allows.

10.3 Some rights are limited where we must keep records for legal, fraud-prevention or evidence reasons, or where other people’s rights are affected. We will explain.

10.4 Complaints. If you are unhappy with how we handled your information, please tell us first (see our Complaints Handling Procedure). You also have the right to complain to the Nigeria Data Protection Commission (section 46 of the NDPA).

Back to top of Privacy Policy

11. Marketing messages

11.1 We send marketing messages by email, SMS and push notification only to Users who have opted in. You can opt out at any time by using the unsubscribe option in a message, by turning off push notifications in your phone settings, or by writing to support@myskillconnect.com.

11.2 Service and security messages, such as one-time passcodes, Booking updates and account notices, are not marketing. We send them even if you opt out of marketing.

12. Changes and contact

12.1 We may update this policy. We will tell you of material changes in the app or by email at least 14 days before they take effect, and ask for fresh consent where the law requires.

12.2 Contact: privacy@myskillconnect.com. Privacy contact: Yvonne Ayogu. General support: support@myskillconnect.com. Website feedback: feedback@myskillconnect.com.

Related documents

• Cookie Policy
• Third-Party Service Providers Disclosure
• Accessibility Statement

Back to Legal Centre