Privacy policy

NaijaUKHub("we", "us") operates naijaukhub.com — a jobs, business directory, events, and community platform for Nigerians and African immigrants in the United Kingdom. This policy explains what personal information we collect, how we use it, and what rights you have under UK GDPR.

If you have questions, contact us at contact@naijaukhub.com.

• Account details — name, email address, phone number (optional), and a password (stored as a hash, never in plain text). If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Career guide tool— your name, email address, the answers you provide (field, goal, experience, interests), the pathways recommended to you, and a device identifier stored in your browser so we don't double-charge our AI provider for the same person.
• Newsletter / job alerts — email address, preferred categories and keywords, location.
• Business directory listings — the details you enter about your business plus your account email.
• Events, organiser pages, and ticketing— event and organiser page details you submit; if you buy a ticket, your name, email address, and order/ticket details (ticket type, quantity, QR code); if you organise a paid event, the identity and bank details you provide to Stripe to verify your account and receive payouts (we don't store your card or full bank details ourselves — see "Payments" below); if you follow an organiser page or buy a ticket, the organiser may send you updates about that organiser's future events (see "Communications" below).
• Payments — ticket payments are processed by Stripe. We receive confirmation that a payment succeeded and the amount, but your card details are handled directly by Stripe and never touch our servers.
• Automatic— IP address, browser user-agent, standard server logs when you visit the site, and, where analytics are enabled (see "Cookies and analytics" below), aggregate usage data such as which pages you visit.

• To deliver the specific tool or service you requested (career roadmap, job alerts, listing, ticket purchase, etc.).
• To send you the emails or event announcements you consented to, and to send transactional messages (confirm your email, respond to enquiries, send your ticket).
• To process ticket payments and organiser payouts securely via Stripe, and to verify an organiser's identity before they can publish paid events.
• To improve the tools and the Site — for example, to see which pathways are most requested or which pages are most used.
• To keep the site secure and prevent abuse, including fraud checks on ticket purchases and payouts.

We do not sell your data to third parties, and we do not use it for third-party advertising profiling.

Your privacy and your right not to be spammed always come first. We only send you marketing communications you've opted into:

• Job alerts or the newsletter — only if you signed up for them, and only about the topics/categories you chose.
• Announcements about a specific event organiser's events — only if you've engaged with that organiser (bought a ticket from them, followed their organiser page, or RSVPed to one of their events).

We do notimport purchased, rented, or third-party contact lists on behalf of organisers or businesses, and organisers cannot message people who haven't engaged with them. You can unsubscribe or opt out at any time using the link in our emails, your account notification settings, or by contacting us. Transactional messages (order confirmations, ticket emails, security notices) are sent regardless of marketing preferences, as they're necessary to provide the service you've asked for.

• Consent — when you tick a box to receive emails from us (career guide, newsletter, job alerts). You can withdraw consent any time.
• Contract — when you submit a business listing or event, buy a ticket, or set up an organiser page, we process the data needed to provide that service (including sharing payment details with Stripe to complete a purchase or payout).
• Legitimate interests — basic server logs, fraud/abuse-prevention measures, and site analytics.

• Vercel — hosts the website, runs serverless functions, and stores uploaded files (data centre: EU/UK region).
• Supabase — Postgres database that stores your submissions and account details.
• Stripe— processes ticket payments, verifies event organisers' identity, and sends payouts. Stripe holds your card and bank details directly; we never see or store full card numbers or bank account numbers.
• Resend — delivers transactional and marketing emails we send you.
• Google (Gemini API) — generates the personalised narrative on the career-guide result page. We send only the answers you gave and the recommended pathway names — no email or contact details.
• Google (Sign in with Google) — if you choose to register or sign in with your Google account, Google shares your name, email address, and profile picture with us.
• Google Analytics 4 and Microsoft Clarity— help us understand how the Site is used. Both run only with your consent. See "Cookies and analytics" below.

These sub-processors are contractually bound to protect your data. Some may transfer data outside the UK/EEA under Standard Contractual Clauses.

• Career guide leads: kept while your consent stands. Delete on request.
• Subscribers: until you unsubscribe (link is in every email).
• Business listings and event submissions: until you ask us to remove them or until they expire per the listing terms.
• Orders and tickets: kept for as long as needed for accounting, fraud-prevention, and dispute-handling purposes, in line with our legal obligations.
• Server logs: 30 days.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct or delete it.
• Withdraw consent at any time (unsubscribe link in every email, or email us).
• Object to certain uses of your data.
• Ask us to move your data to another provider (data portability).
• Complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

To exercise any of these rights, email contact@naijaukhub.com. We respond within 30 days.

We use a small number of strictly necessary first-party cookies and browser localStorage entries to keep you logged in, protect forms from abuse, remember your device for the career guide, and record your cookie choice itself. These do not require consent and are always set.

Everything else is set only if you accept:

• Google Analytics 4 — how many people visit, which pages they read, and which routes lead to a job application or a ticket.
• Microsoft Clarity — anonymised recordings of how pages are used, so we can see where something is broken or confusing. It does not load at all unless you accept.
• Google AdSense — advertising. If you reject, ads may still appear but are not personalised to you and no advertising identifier is stored.

If you reject, Google Analytics still counts your visit without storing any identifier on your device or recognising you across visits, and no analytics or advertising cookie is set.

Rejecting changes nothing about what you can do on the Site. You can change your mind at any time using Cookie preferences in the footer of any page — withdrawing consent is exactly as easy as giving it.

The site and its tools are aimed at people aged 16 and over. We don't knowingly collect data from children under 16. If you believe we have, contact us and we'll delete it.

We may update this policy. Material changes will be announced on the site. The "Last updated" date above always reflects the current version.