Privacy Policy

Last updated: 1 November 2026 · Governing frameworks: Nigeria Data Protection Regulation (NDPR) 2019 & NDPA 2023; UK GDPR & Data Protection Act 2018.

1.Who we are (Data Controller)

Your personal data is controlled by:

For any privacy question or request, contact our data protection point of contact at mrjoeukman@afrisovera.com (or info@afrisovera.com.ng for Nigeria-based enquiries).

2.What data we collect

There are two ways to join:

Some accounts created before November 2026 joined through the SOV Network and carry a pseudonymous ID and nickname from it. Afrisovera never received or stored palm biometric data.

DataWhere it comes from
Pseudonymous SOV ID and nickname (older accounts only)Accounts created before November 2026 through the SOV Network
NameYour profile or your invitation
Email addressYour profile, or the invitation used to onboard you
Password (stored only as a one-way bcrypt hash — never in plain text)Set by you when you join or accept an invitation
Country / regionYour profile
Course & module progress, quiz results, practical work you upload for assessmentYour use of the learning portal
Consent record (that you accepted this policy, with timestamp)When you join

Trainees sign in with their email address and password. Staff sign in on the staff page with their email address or member ID and password. We never hold your biometric data at any point.

If you apply to Afrisovera Builders through the careers form, we additionally collect the details you provide there — Nigerian phone number, age, Local Government Area of residence, trade interest, and any background notes you choose to share.

We do not ask for or store financial-account numbers, government ID numbers, or payment-card details through this portal.

3.Why we collect it & our lawful basis

We will only use your data for the purposes described here. We will not sell your personal data, and we will not use it for unrelated marketing without asking you first.

4.How long we keep it

We keep the data associated with an active account for as long as the account remains active, so we can maintain your learning record and certifications. If you ask us to delete your account, we will erase your personal data within 30 days, except where we are required by law or accreditation rules to retain a limited training record.

5.Your rights

Under the NDPR/NDPA and UK GDPR (Articles 15–20) you have the right to:

To exercise any of these rights, email mrjoeukman@afrisovera.com. We aim to respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or, in the UK, the Information Commissioner's Office (ICO).

6.How we protect your data

Passwords are stored only as one-way bcrypt hashes — never in plain text. Your session is protected by a signed, time-limited token, data in transit is encrypted over HTTPS, and access to personal data is limited to Afrisovera staff who need it to operate the training and Builders programmes. Your palm biometric data is never received or stored by Afrisovera.

7.International transfers

Afrisovera operates between the United Kingdom and Nigeria, so your data may be processed in either country. AFRISOVERA GLOBAL HOLDINGS LIMITED applies the standards in this policy to your data wherever it is processed. If a Nigerian Afrisovera company is formed in future, this policy will be updated to say so before it handles any of your data.

Nigeria (NDPR / NDPA): AFRISOVERA GLOBAL HOLDINGS LIMITED is the data controller under the UK GDPR, and applies the standards of the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA) 2023 to personal data of people in Nigeria. A Nigerian Afrisovera company is planned but not yet incorporated; when it is formed, it will register with the Nigeria Data Protection Commission as required and this policy will be updated.