Privacy Policy

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Create an account: Name, email address, password, phone number, and account type (job seeker or employer)
• Complete your profile: Professional experience, education, skills, certifications, career preferences, salary expectations, and availability
• Upload documents: Resume, cover letters, portfolio items, and other supporting documents
• Post job listings: Job descriptions, requirements, company information, and compensation details
• Communicate on the platform: Messages, comments, and other communications with other users
• Make payments: Payment information for premium services (processed securely through third-party payment processors)
• Contact support: Information provided in support requests and feedback
• Participate in surveys: Responses to optional surveys and research studies

2.2 Information Automatically Collected

When you access and use our Platform, we automatically collect certain information about your device and usage patterns:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, time spent on pages, clicks, search queries, and navigation patterns
• Log Information: IP address, access times, referring URLs, and error logs
• Location Data: Approximate location based on IP address (precise location only with your explicit consent)
• Performance Data: Platform performance metrics and crash reports to improve our services

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social Media Platforms: Profile information when you connect your LinkedIn, Google, or other social media accounts
• Professional Networks: Publicly available professional information from platforms like LinkedIn
• Background Check Providers: Verification information (only with your explicit consent and for specific job applications)
• Educational Institutions: Degree and certification verification data
• Previous Employers: Reference information and employment verification (with your consent)
• Data Enrichment Services: Additional professional information to enhance your profile (with your consent)

2.4 Cookies and Tracking Technologies

We use various tracking technologies to collect information:

• Essential Cookies: Required for basic platform functionality, security, and user authentication
• Functional Cookies: Remember your preferences, settings, and login status
• Analytics Cookies: Help us understand how users interact with our platform
• Marketing Cookies: Used for targeted advertising and measuring campaign effectiveness (with your consent)
• Web Beacons: Small graphics that help us track email open rates and user engagement

3.1 Core Platform Services

• Account Management: Creating, maintaining, and securing your user account
• Job Matching: Connecting job seekers with relevant opportunities based on skills, experience, and preferences
• Application Processing: Facilitating job applications and managing the hiring workflow
• Communication: Enabling messaging between employers and job seekers
• Profile Display: Showing your profile to relevant employers (job seekers) or displaying job postings (employers)
• Search and Discovery: Helping users find jobs, candidates, or companies
• Verification: Verifying user identities and professional credentials

3.2 Platform Improvement and Analytics

• Usage Analysis: Understanding how users interact with our platform to improve user experience
• Performance Monitoring: Tracking platform performance and identifying technical issues
• Feature Development: Developing new features based on user behavior and feedback
• Security Monitoring: Detecting and preventing fraud, abuse, and security threats
• Quality Assurance: Ensuring the accuracy and relevance of job matches and recommendations
• Research and Development: Conducting research to improve our algorithms and services

3.3 Communication and Marketing

• Platform Notifications: Sending alerts about job matches, application updates, and platform activities
• Promotional Communications: Marketing emails about new features, premium services, and platform updates (with your consent)
• Customer Support: Responding to your inquiries and providing technical assistance
• Important Updates: Communicating changes to our terms, policies, or services
• Educational Content: Providing career advice, industry insights, and professional development resources

3.4 Legal and Compliance

• Legal Compliance: Complying with applicable laws, regulations, and legal processes
• Safety and Security: Protecting the safety and security of our users and platform
• Dispute Resolution: Resolving disputes and investigating potential violations of our terms
• Record Keeping: Maintaining records as required by law or for business purposes

4.1 With Your Explicit Consent

• Job Applications: Sharing your profile and application materials with employers when you apply for positions
• Profile Visibility: Making your profile visible to employers based on your privacy settings
• Reference Checks: Sharing contact information with potential employers for reference verification
• Background Checks: Facilitating background verification services with your explicit consent
• Third-Party Integrations: Connecting with external services you choose to integrate

4.2 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our platform:

• Cloud Hosting Providers: Storing and processing data securely in the cloud
• Payment Processors: Processing payments for premium services (they handle payment data separately)
• Email Service Providers: Sending platform notifications and communications
• Analytics Providers: Analyzing platform usage and performance
• Security Services: Monitoring for fraud and security threats
• Customer Support Tools: Providing customer service and technical support
• Background Check Services: Conducting employment verification (with your consent)

All service providers are bound by strict confidentiality agreements and are only permitted to use your information for the specific services they provide to us.

4.3 Legal Requirements and Safety

We may disclose your information when required by law or to protect safety:

• Legal Process: Responding to court orders, subpoenas, or other legal requests
• Law Enforcement: Cooperating with law enforcement investigations
• Safety Protection: Protecting the safety of our users, employees, or the public
• Rights Protection: Protecting our rights, property, or security
• Terms Enforcement: Investigating violations of our Terms of Service
• Fraud Prevention: Preventing fraud, abuse, or illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of the business transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.5 Aggregated and De-identified Data

We may share aggregated, de-identified, or anonymized data that cannot be used to identify you for research, analytics, or business purposes. This includes industry reports, market analysis, and platform statistics.

5.1 Security Measures

We implement comprehensive security measures to protect your personal information:

• Encryption: All data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption
• Access Controls: Strict access controls ensure only authorized personnel can access personal data
• Multi-Factor Authentication: Optional MFA for enhanced account security
• Regular Security Audits: Comprehensive security assessments and penetration testing
• Secure Infrastructure: Hosting on secure, compliant cloud infrastructure
• Data Backup: Regular encrypted backups to prevent data loss
• Incident Response: Established procedures for responding to security incidents

5.2 Employee Training and Access

• Privacy Training: All employees receive regular privacy and security training
• Need-to-Know Access: Employees only have access to data necessary for their job functions
• Confidentiality Agreements: All staff sign comprehensive confidentiality agreements
• Background Checks: Security screening for employees with access to sensitive data

5.3 Data Breach Response

In the unlikely event of a data breach, we have established procedures to contain the incident, assess the impact, and notify affected users and relevant authorities as required by law, typically within 72 hours of discovery.

5.4 Your Security Responsibilities

While we implement strong security measures, you also play a role in protecting your account:

• Use a strong, unique password for your TechiHub account
• Enable two-factor authentication when available
• Log out of your account when using shared or public computers
• Report suspicious activity or potential security issues immediately
• Keep your contact information up to date for security notifications

6.1 Access and Control

You have several rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Portability: Request your data in a portable, machine-readable format

6.2 Profile Visibility Settings

Job seekers can control how their profiles are displayed:

• Public Profile: Visible to all employers on the platform
• Limited Visibility: Visible only to employers you've interacted with
• Anonymous Browsing: Browse jobs without revealing your identity to employers
• Blocked Companies: Prevent specific employers from viewing your profile
• Contact Preferences: Control how employers can contact you

6.3 Communication Preferences

You can control the communications you receive:

• Job Alerts: Customize frequency and types of job recommendations
• Marketing Emails: Opt out of promotional communications
• Platform Notifications: Control in-app and email notifications
• SMS Notifications: Manage text message preferences
• Newsletter: Subscribe or unsubscribe from our newsletter

6.4 Data Portability

You can request a copy of your personal data in a commonly used, machine-readable format. This includes your profile information, job application history, and communication records.

6.5 Account Deletion

You can request deletion of your account and associated data through your account settings or by contacting support. Please note:

• Some information may be retained for legal compliance or business purposes
• Anonymized data may be retained for analytics and research
• Backup copies may take up to 90 days to be fully removed
• Information shared with employers may remain in their systems

6.6 Exercising Your Rights

To exercise your privacy rights:

• Log into your account and visit the Privacy Settings page
• Contact our Data Protection Officer at dpo@techhub.co.ke
• Submit a request through our support center
• Send a written request to our physical address

We will respond to your request within 30 days and may require identity verification to protect your privacy.

7.1 Types of Cookies We Use

7.2 Other Tracking Technologies

• Web Beacons: Small graphics in emails that help us track open rates and engagement
• Pixel Tags: Used to measure the effectiveness of our advertising campaigns
• Local Storage: Stores data locally on your device to improve platform performance
• Session Replay: Records user interactions to identify and fix usability issues (anonymized)

7.3 Managing Cookie Preferences

You can control cookies through:

• Cookie Consent Manager: Update your preferences through our cookie banner
• Browser Settings: Most browsers allow you to block or delete cookies
• Account Settings: Manage tracking preferences in your account privacy settings
• Opt-out Tools: Use industry opt-out tools for advertising cookies

Note that disabling certain cookies may affect platform functionality and your user experience.

7.4 Third-Party Cookies

Some cookies are set by third-party services we use, such as Google Analytics, social media plugins, and advertising networks. These third parties have their own privacy policies governing their use of cookies.

8.1 Retention Periods

We retain your personal information for different periods depending on the type of data and purpose:

• Active Account Data: Retained while your account is active and for a reasonable period after deactivation
• Job Application Records: Retained for 7 years for legal compliance and dispute resolution
• Communication Records: Retained for 3 years or as required by law
• Payment Information: Retained as required by tax and financial regulations (typically 7 years)
• Marketing Data: Retained until you withdraw consent or for 3 years of inactivity
• Analytics Data: Aggregated data may be retained indefinitely in anonymized form

8.2 Secure Deletion

When data reaches the end of its retention period, we securely delete it using industry-standard data destruction methods. Backup copies are also securely deleted according to our backup retention schedules.

8.3 Legal Holds

In some cases, we may need to retain data longer than usual due to legal holds, ongoing investigations, or pending litigation. We will notify you if this affects your data deletion request.

9.1 Global Operations

TechiHub operates globally, and your information may be transferred to, stored, and processed in countries other than your own, including Kenya, European Union countries, and the United States. These countries may have different data protection laws than your home country.

9.2 Transfer Safeguards

When transferring your personal information internationally, we implement appropriate safeguards:

• Adequacy Decisions: Transfers to countries recognized as providing adequate protection
• Standard Contractual Clauses: Using EU-approved contractual terms for data transfers
• Binding Corporate Rules: Internal rules ensuring consistent protection across our global operations
• Certification Programs: Participating in recognized data protection certification schemes
• Privacy Shield (where applicable): Adhering to privacy frameworks between countries

9.3 Data Localization

Where required by local laws, we maintain data within specific geographical boundaries. For example, certain employee data may be stored within the European Economic Area to comply with GDPR requirements.

10.1 Sensitive Personal Information

We generally do not collect sensitive personal information (such as race, religion, political opinions, health data, or sexual orientation) unless specifically required for legitimate purposes and with your explicit consent. When we do process such information:

• We obtain your explicit consent before collection
• We implement additional security measures
• We limit access to authorized personnel only
• We provide clear information about the purpose and legal basis
• We allow you to withdraw consent at any time

10.2 Diversity and Inclusion Data

Some employers may request diversity information for equal opportunity monitoring. This information is always optional, collected separately from your main profile, and used only for legitimate diversity and inclusion purposes.

10.3 Background Check Information

Background checks are conducted only with your explicit consent and for specific job applications. We work with certified providers and ensure all checks comply with applicable employment laws and regulations.

13.1 Internal Complaints Process

If you have concerns about our privacy practices, please contact us first. We are committed to resolving privacy concerns promptly and fairly:

• Contact our Data Protection Officer at dpo@techhub.co.ke
• Provide detailed information about your concern
• We will acknowledge your complaint within 48 hours
• We will investigate and respond within 30 days
• We will provide clear information about any actions taken

13.2 Regulatory Authorities

You have the right to lodge a complaint with relevant data protection authorities:

• Kenya: Office of the Data Protection Commissioner
• European Union: Your local data protection authority
• United States: Federal Trade Commission or state attorneys general
• Other Countries: Relevant national or regional privacy regulators

13.3 Alternative Dispute Resolution

We participate in alternative dispute resolution programs where available and may offer binding arbitration for certain privacy disputes as an alternative to court proceedings.