Privacy Policy

Last updated: July 2026 · Governing frameworks: Nigeria Data Protection Regulation (NDPR) 2019 & NDPA 2023; UK GDPR & Data Protection Act 2018.

1.Who we are (Data Controller)

Your personal data is controlled by the Afrisovera group:

AFRISOVERA GLOBAL HOLDINGS LIMITED — the UK parent and overall data controller. Company No. 17244459, registered in England & Wales. Registered office: Office 19286, 182–184 High Street North, East Ham, London, E6 2JA.
AFRISOVERA NIGERIA LIMITED — the Nigerian operational entity, joint controller for training, careers and community data processed in Nigeria.

For any privacy question or request, contact our data protection point of contact at mrjoeukman@afrisovera.com (or info@afrisovera.com.ng for Nigeria-based enquiries).

2.What data we collect

There are two ways to join, and both are supported:

SOV Network enrollment — you verify through SOV Network, which issues you a pseudonymous Sovereign ID and a palm name. We never receive or store your palm biometric data.
Assisted onboarding — if you cannot complete biometric enrollment for any reason, you can write to us and a member of Afrisovera staff or support will onboard you by invitation. You receive an invitation by email and set your own password.

Data	Where it comes from
Sovereign ID (pseudonymous identifier)	SOV Network enrollment
Palm name / nickname	SOV Network enrollment
Name	Your profile or your invitation
Email address	Your profile, or the invitation used to onboard you
Password (stored only as a one-way bcrypt hash — never in plain text)	Set by you when you join or accept an invitation
Country / region	Your profile
Course & module progress, quiz results, practical work you upload for assessment	Your use of the learning portal
Consent record (that you accepted this policy, with timestamp)	When you join

You sign in with either your Sovereign ID or your email address, together with your password. We never hold your biometric data at any point, whichever route you joined by.

If you apply to Afrisovera Builders through the careers form, we additionally collect the details you provide there — Nigerian phone number, age, Local Government Area of residence, trade interest, and any background notes you choose to share.

We do not ask for or store financial-account numbers, government ID numbers, or payment-card details through this portal.

3.Why we collect it & our lawful basis

To provide training services — create and manage your account, deliver courses, and track your learning progress. Lawful basis: performance of a service you request, and your consent.
To operate the Afrisovera Builders pipeline — assess eligibility, contact you about cohorts, and manage recruitment and placement. Lawful basis: your consent and our legitimate interest in running the programme.
To meet legal and accreditation obligations — e.g. training records for City & Guilds / NBTE certification. Lawful basis: legal obligation and legitimate interest.

We will only use your data for the purposes described here. We will not sell your personal data, and we will not use it for unrelated marketing without asking you first.

4.How long we keep it

We keep the data associated with an active account for as long as the account remains active, so we can maintain your learning record and certifications. If you ask us to delete your account, we will erase your personal data within 30 days, except where we are required by law or accreditation rules to retain a limited training record.

5.Your rights

Under the NDPR/NDPA and UK GDPR (Articles 15–20) you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct data that is inaccurate or incomplete.
Erasure — ask us to delete your personal data ("right to be forgotten").
Portability — receive your data in a structured, machine-readable format.
Restriction & objection — ask us to limit or stop certain processing.
Withdraw consent — at any time, without affecting processing already carried out.

To exercise any of these rights, email mrjoeukman@afrisovera.com. We aim to respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or, in the UK, the Information Commissioner's Office (ICO).

6.How we protect your data

Passwords are stored only as one-way bcrypt hashes — never in plain text. Your session is protected by a signed, time-limited token, data in transit is encrypted over HTTPS, and access to personal data is limited to Afrisovera staff who need it to operate the training and Builders programmes. Your palm biometric data is never received or stored by Afrisovera.

7.International transfers

Afrisovera operates between the United Kingdom and Nigeria, so your data may be processed in either country. Both AFRISOVERA GLOBAL HOLDINGS LIMITED and AFRISOVERA NIGERIA LIMITED apply the standards in this policy to your data wherever it is processed.

NDPR / NDPA registration: AFRISOVERA NIGERIA LIMITED processes personal data in accordance with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA) 2023, and is registered as required with the Nigeria Data Protection Commission. AFRISOVERA GLOBAL HOLDINGS LIMITED is the UK data controller under the UK GDPR.