African-built privacy compliance solution designed for the unique challenges of the African regulatory landscape.
© 2025 Ulinzi, a Tech Hive Advisory Company. All rights reserved.
Version 1.0 • Effective August 5, 2026 • Last updated August 5, 2026
Ulinzi respects the privacy of everyone who applies to work with us. This notice covers:
This Candidate Privacy Notice explains how Ulinzi may collect, use, store, disclose and otherwise process personal data when you apply for, or express an interest in, a role or job opportunity with Ulinzi. It applies to applications submitted directly to Ulinzi and, where applicable, through recruitment agencies or platforms. We may update this notice to reflect changes in our processing, business operations, or legal and regulatory requirements.
Ulinzi is an all-in-one privacy compliance solution that may provide services including risk assessment, policy management, data inventory, regulatory intelligence and AI implementation.
“Ulinzi”, “we”, “us” or “our” refers to the relevant Ulinzi entity acting as data controller for your application. Our contact email and data protection contact is hello@ulinzi.io. You may contact us there with questions or to exercise your rights.
Ulinzi may offer fixed-term, full-time or other employment opportunities to suitably qualified applicants interested in technology policy, privacy compliance and our other work. We are committed to equal employment opportunity and to conducting recruitment in a fair, consistent and non-discriminatory manner. We may assess your skills, qualifications, experience, availability and suitability, together with the requirements of the role and Ulinzi’s business needs.
We do not collect diversity information, health information or criminal-record information as part of the application process. Please do not provide such information in your application materials unless Ulinzi specifically requests it in accordance with applicable law.
Depending on the role and recruitment stage, we may collect:
•Your name and contact details
•Your CV, cover letter, application responses, employment history, education, qualifications, skills and professional experience
•LinkedIn or other professional profile information where you provide it or where relevant information is publicly available
•Availability, notice period, work-location preferences and salary expectations where relevant
•Interview notes and recruitment communications
•Information provided by referees or recruitment agencies
•Information needed for identity or right-to-work checks where applicable and legally permitted
•Other information you choose to provide in connection with your application
We may collect personal data:
•Directly from you
•During interviews, assessments and recruitment communications
•From recruitment agencies or platforms
•From referees or professional contacts where applicable and legally permitted
•From publicly available professional sources such as LinkedIn
•From service providers assisting with recruitment administration or verification
Where we collect information indirectly, we may use it only for the purposes described here or another purpose permitted by applicable law.
We may process your personal data to:
•Receive, administer and assess your application
•Determine your suitability
•Communicate with you
•Arrange and conduct interviews or assessments
•Verify qualifications and employment history
•Conduct reference checks and identity or right-to-work checks where applicable and legally permitted
•Maintain recruitment records
•Comply with legal, regulatory, accounting or professional requirements
•Establish, exercise or defend legal claims, including employment or discrimination-related claims
•Where you separately consent, consider you for future opportunities
The lawful basis may vary by purpose, information and applicable law. We may rely on legitimate interests in managing recruitment and assessing applicants, steps taken at your request before entering into a contract, legal obligations where applicable, and consent for optional future opportunities. Where we rely on legitimate interests, we may consider our interest in an effective, fair and documented recruitment process while taking account of your rights and interests.
You may choose not to provide certain information. However, if information is reasonably necessary to assess your application, administer recruitment or comply with a legal requirement, failure to provide it may mean we cannot process or progress your application.
If you separately consent, we may retain your CV and relevant application information in our talent pool and contact you about future opportunities. This consent is optional and is not required for the current role. You may withdraw consent at any time by contacting hello@ulinzi.io. Withdrawal will not affect processing already carried out lawfully before withdrawal.
Where reasonably necessary and subject to appropriate safeguards, we may share your data with:
•Ulinzi employees, contractors and advisers involved in recruitment
•Hiring managers and interview panel members
•Recruitment agencies and platforms
•Providers of applicant-tracking, hosting, storage, communications, identity-verification or right-to-work-verification services
•Professional advisers, auditors, insurers and other service providers
•Courts, regulators, law-enforcement bodies or other authorities where required or permitted by law
•Other parties where you consent or disclosure is otherwise permitted by law
We may require service providers to process data only on our instructions, maintain confidentiality and implement appropriate security measures.
Where your personal data is transferred outside the country in which it was collected, we may take reasonable steps to ensure that an adequate safeguard is put in place in accordance with applicable data protection law. Safeguards may include contractual, organisational, technical or other legally recognised measures.
We may use reasonable and appropriate technical, physical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure or destruction. These measures may include access controls, role-based access, confidentiality obligations, secure storage and transmission, vendor due diligence, access monitoring, retention controls and incident-response procedures. Access may be limited to people who need it for recruitment or another lawful purpose.
No transmission or storage method can be guaranteed to be completely secure. Where required by law, we may notify affected individuals and regulators of a breach.
We may retain application records for up to six months after the recruitment process or decision for the relevant role, unless a longer period is reasonably necessary or permitted for a lawful purpose. We may retain records longer where necessary to establish, exercise or defend legal claims, including employment or discrimination-related claims, or to meet legal, accounting, regulatory or professional requirements.
Where you separately consent to our talent pool, we may retain your CV and relevant application information for up to six months after the application process for future opportunities. We may delete or anonymise information earlier where it is no longer reasonably necessary.
If you request deletion, we may delete or anonymise your personal data within 30 days, unless retention is required or permitted for legal, accounting, regulatory, professional or claims-related purposes. If we cannot complete deletion within 30 days, we may notify you and explain why, subject to applicable law.
Ulinzi does not currently use automated decision-making to determine the outcome of applications. Applications may be reviewed and assessed by members of our recruitment team. If this changes, we may update this notice and provide information required by applicable law before implementing relevant automated decision-making.
Subject to applicable law and lawful limitations, you may have the right to:
•Be informed
•Access your personal data
•Request correction or rectification
•Request deletion or erasure
•Request restriction
•Object to processing
•Receive your data in a structured, commonly used and machine-readable format where portability applies
•Withdraw consent
•Request human review or intervention concerning applicable automated decision-making
•Object to or challenge applicable profiling
•Lodge a complaint with the Nigeria Data Protection Commission or another competent supervisory authority
To exercise a right, contact hello@ulinzi.io. We may verify your identity or request clarification. We may respond within the period required by applicable law. If a request cannot be fully satisfied, we may explain why, subject to applicable law.
For questions, concerns or complaints, contact hello@ulinzi.io. You may also contact the Nigeria Data Protection Commission at info@ndpc.gov.ng or through its official website, and may have the right to contact another competent supervisory authority where applicable.