PrivacyatGuild.

Guild is an economic identity service operated by Guild Technologies Ltd., a company registered in Nigeria. When you use Guild — over phone, SMS, or the web — we act as a data controller for the information described in this notice. The Nigeria Data Protection Commission (NDPC) is our supervisory authority.

We collect the smallest amount of information needed to run the service responsibly. That generally falls into a few categories.

• Account informationYour name, phone number, email, and the role you sign up as — worker, trader, or employer.
• Identity verificationBVN or NIN where required, plus a selfie or government ID. Used only to confirm you are who you say you are.
• Work and payment recordsJobs you complete, sales you log, hours worked, invoices issued, and payments sent or received through Guild.
• Device and connectionIP address, device type, OS version, and basic logs needed to keep the service stable and secure.
• CommunicationsCalls, SMS, and chat exchanges with our support team, used to help you and improve how Guild works.

We use your data only for purposes that are clear, lawful, and tied to running Guild well.

• To operate the servicePower your account, log your work, move payments, and send confirmations.
• To verify identityMatch you to a real person and prevent fraud, impersonation, and account takeover.
• To build your trust scoreTurn the work and payments you log into a portable record you can use to get hired and access credit.
• To keep the platform safeDetect abuse, monitor for unusual activity, and meet anti-money-laundering obligations.
• To meet legal dutiesRespond to lawful requests from regulators, courts, and tax authorities in Nigeria.

We do not sell your data. We share it only in narrow, predictable circumstances — and only what is needed for the job.

• With your explicit consentWhen you choose to share your record with an employer, lender, or partner. You can revoke that consent at any time.
• With service providersCloud hosting, payment processors, telephony, and identity verification partners — bound by strict contracts.
• For legal complianceWhere Nigerian law requires us to respond to a lawful order, court process, or regulatory request.
• In a corporate eventIf Guild is acquired or merged, your data moves with the service — under the same protections, or stronger.

We keep records only as long as we have a clear reason to. Active work and payment records remain available while your account is open. Tax and regulatory records are kept for the period Nigerian law requires — typically up to seven years. Backups roll off within ninety days. When you close your account, we delete or anonymize your data within sixty days, except where retention is legally required.

Nigerian data protection law gives you a clear set of rights over your own information. You can exercise any of them by writing to dpo@guild.tech.

• AccessAsk for a copy of the data we hold about you.
• RectificationCorrect anything that is inaccurate or incomplete.
• ErasureHave your data deleted where it is no longer needed and not legally required.
• PortabilityGet a structured export of your records to take elsewhere.
• ObjectionObject to processing for marketing or other non-essential uses.
• Withdraw consentPull back any permission you previously gave, at any time.

Data is encrypted in transit and at rest. Access to production systems is limited to a small group of staff under strict need-to-know policies. We require strong authentication for every account, monitor for suspicious sign-ins, and run regular reviews of our security posture. No system is perfect — if a breach affects you, we will notify you and the NDPC promptly.

Your data is primarily stored and processed in Nigeria. A small number of trusted service providers — for example, identity verification or email delivery — operate outside Nigeria. When that happens, we rely on standard contractual safeguards approved under NDPR and only transfer the minimum data needed.

Guild is built for adults. We do not knowingly collect data from anyone under 18. If you believe a child has signed up, write to us at privacy@guild.tech and we will remove the account.

We will update this notice as Guild grows. Material changes — anything that meaningfully affects your rights or how your data is used — will be communicated by SMS or email at least fourteen days before they take effect. The effective date at the top of this page tells you which version is current.

Questions, requests, or concerns about how we handle your data? Reach our Data Protection Officer at dpo@guild.tech. For general privacy questions, write to privacy@guild.tech. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.