Privacy Policy

When you use GeoHubNG, you trust us with your information. This Privacy Policy is designed to help you understand what data we collect and how we handle it. We collect only what is necessary to operate the platform and improve your experience.

We do not sell your personal data. We do not use your data for advertising purposes. We do not share your data with third parties except as described in this Policy.

GeoHubNG is Nigeria's dedicated professional network for the geospatial industry, operating from Abuja, FCT, Nigeria.

For the purposes of the NDPR and NDPA 2023, GeoHubNG is the Data Controller responsible for your personal data collected through this platform.

We collect the following categories of personal data:

Account & Profile Data

• Full name, email address, and password (hashed — never stored in plain text)
• Professional details: job title, specialisations, years of experience, skills
• Location: state and country
• Organisation name, website, and LinkedIn profile URL (optional)
• Profile photo (optional)
• Bio or professional summary (optional)

Platform Activity Data

• Forum posts, replies, and thread participation
• Resources you submit to the library
• Job listings you post or applications you submit
• Directory listings you create or manage
• Connections and professional network activity

Technical Data

• IP address (used for security, rate limiting, and fraud prevention)
• Browser type, device type, and operating system
• Session data and authentication tokens
• Pages visited and time spent on the platform

Payment Data

• Transaction records (amount, date, purpose) stored by GeoHubNG
• Card details are processed exclusively by Paystack and are never stored on GeoHubNG servers

We collect data through the following means:

• Registration forms — when you create an account or complete your profile
• Platform activity — when you post, connect, apply for jobs, or use forum features
• Contact forms — when you send us a message through the contact page
• Payment processing — when you make a payment through Paystack
• Cookies and technical tracking — automatically when you visit the platform (see Section 11)
• GeoHubEngine GeoSight™ — when you enter a location query for geospatial analysis (see Section 8)

We use your personal data to:

• Create and manage your account and professional profile
• Provide and improve all platform features and services
• Display your profile to other members of the community
• Send you email verification links and account security notifications
• Process payments for paid platform features
• Suggest relevant job matches, connections, and resources
• Detect and prevent fraud, spam, and abuse
• Respond to your enquiries and support requests
• Send platform updates and community notifications (you can unsubscribe at any time)
• Comply with our legal obligations under Nigerian law

We do not use your data for behavioural advertising, profiling for commercial purposes, or automated decision-making that produces legal or significant effects.

Under the NDPR and NDPA 2023, we process your personal data on the following legal bases:

• Contract performance — processing necessary to provide you with platform services you have requested
• Legitimate interests — improving the platform, preventing fraud, and ensuring community safety
• Consent — for optional communications such as newsletters and community digest emails
• Legal obligation — where Nigerian law requires us to process or retain data

We do not sell your personal data. We share data only in the following limited circumstances:

• Other GeoHubNG members — your public profile information is visible to registered members. You control what appears on your profile.
• Paystack — payment processing. Paystack has its own privacy policy and is PCIDSS compliant.
• Email service provider — we use Brevo (formerly Sendinblue) to send transactional emails. Your email address is shared with Brevo solely for this purpose.
• Legal requirements — we may disclose data if required by Nigerian law, court order, or to protect the rights, property, or safety of GeoHubNG, our members, or the public.

We do not share your data with advertisers, data brokers, or any third party for commercial purposes.

GeoHubEngine™ is our location intelligence tool that analyses geographic locations using satellite and spatial data layers. When you use GeoHubEngine™:

• The location query you enter (e.g. "Lekki, Lagos") is processed to generate geospatial analysis results
• Location queries are sent to external geocoding APIs (OpenStreetMap Nominatim) and tile services (Esri, OpenStreetMap) to retrieve map and satellite data
• Location queries are not stored on GeoHubNG servers beyond the current browser session unless you explicitly save a result
• We do not collect, track, or store your device's GPS location
• Rate-limiting data (your IP address and request count) is temporarily stored to prevent abuse and is automatically deleted after one hour

External services used by GeoHubEngine™ (Nominatim, Esri, OpenStreetMap) have their own privacy policies. Queries sent to these services may include the location text you entered.

We retain your personal data for as long as your account is active or as needed to provide you with platform services. Specifically:

• Account data — retained for the duration of your account. Deleted within 30 days of account closure upon request.
• Forum posts and public content — may be retained in anonymised form after account deletion to preserve community discussions.
• Payment records — retained for 7 years as required by Nigerian tax and financial regulations.
• Security logs (IP addresses) — retained for up to 90 days for fraud prevention and security investigation.
• Rate-limiting transients — automatically deleted after 1 hour.
• Contact form messages — retained for up to 2 years for correspondence records.

We take the security of your personal data seriously. Our security measures include:

• All data transmission encrypted via HTTPS/TLS
• Passwords hashed using industry-standard algorithms (bcrypt via WordPress)
• CSRF protection on all form submissions via WordPress nonces
• Rate limiting on authentication endpoints to prevent brute-force attacks
• Email verification required before full platform access is granted
• Regular security audits of platform code and dependencies
• Payment card data handled exclusively by Paystack (PCIDSS Level 1 certified)

No system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware, as required by the NDPA 2023.

GeoHubNG uses cookies and similar technologies to operate the platform. We use the following types:

• Essential cookies — required for authentication (login sessions), security (CSRF tokens), and basic platform functionality. These cannot be disabled.
• Preference cookies — remember your settings and preferences across sessions.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies that identify you personally. We do not use Google Analytics or Facebook Pixel.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in to GeoHubNG.

Under the NDPR and NDPA 2023, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate or incomplete personal data (most data can be updated directly in your profile settings)
• Right to erasure — request deletion of your account and personal data, subject to legal retention obligations
• Right to restrict processing — ask us to limit how we use your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for optional communications at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@geohubng.com with the subject line "Data Rights Request". We will respond within 30 days.

GeoHubNG is not directed at or intended for use by persons under the age of 18. We do not knowingly collect personal data from children. If we become aware that a user under 18 has registered on the platform, we will delete their account and associated data without notice.

If you believe a child has provided us with personal data, please contact us at hello@geohubng.com immediately.

GeoHubNG operates primarily within Nigeria. However, some of our service providers — including Brevo (email delivery) and Paystack (payment processing) — may process data outside Nigeria.

Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with the NDPA 2023, including contractual protections that require receiving parties to apply equivalent data protection standards.

GeoHubEngine GeoSight™ queries may be sent to servers operated by Esri (USA) and OpenStreetMap (EU) for map and satellite tile retrieval. These transfers are necessary to provide the geospatial analysis service.

GeoHubNG may contain links to third-party websites, resources, and employer pages. These sites have their own privacy policies and we are not responsible for their practices. We encourage you to review the privacy policy of any external site you visit through links on our platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, platform features, or applicable law. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered members via email or platform notification
• Where required by the NDPA 2023, obtain fresh consent before processing data in a new way

Your continued use of GeoHubNG after the effective date of any updated Policy constitutes your acceptance of the changes.

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how we handle your data, contact us:

If you are unsatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpb.gov.ng.