Privacy Policy

Introduction

Yesgudarstor Technologies Ltd (Yesgudarstor) is a conscientious company. We respect your privacy, and we are committed to protecting your personal data. This privacy policy will inform you of how we look after your personal data and inform you of your privacy rights and how the law protects you.

This Privacy Policy has been published to better serve those who are concerned with how their Personal Data is being used by Yesgudarstor, and it outlines the information we collect from you, why we collect such data, how we use the data, how you can control your data, and how we manage, store, protect, share, retain or delete your information. This privacy policy will inform you as to how we look after your personal data when you visit our Getjabb website or the Getjabb application (regardless of where you visit it from) and inform you about your privacy rights and how the law protects you.

This privacy policy is issued by Yesgudarstor and applies to its operation of the GetJabb website and application. The words "Yesgudarstor", "we", "us" or "our" in this privacy policy refer to Yesgudarstor Technologies Ltd.

Consent

By accepting the GetJabb Terms and Conditions of Service, you acknowledge that this Privacy Policy explains how we process your personal data. Acceptance of the Terms does not, of itself, amount to consent to every processing activity or to unrelated optional processing.

It is important that you read this Privacy Policy together with any other policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This Privacy Policy complements other notices and policies and is not intended to override them.

We process personal data on the applicable lawful basis, including where necessary to provide the services you request or perform our contract with you, comply with a legal obligation, or pursue legitimate interests such as service security and fraud prevention, subject to your rights. Where processing requires consent, we ask for it for the relevant purpose. Consent may be withdrawn by using the relevant controls or contacting us; withdrawal does not affect the lawfulness of earlier processing or processing supported by another lawful basis. Optional marketing consent is separate from acceptance of the Terms.

You must be at least 18 years old to register an account for the Getjabb website or application. The Getjabb website or application is not intended for children, and we do not knowingly collect data relating to children.

Scope of this Privacy Policy

Please note that this Privacy Policy applies to Getjabb's main web pages and Getjabb application (i.e. those in https://www.getjabb.com/) and generally to the business of Yesgudarstor. If you follow a link to any other website, please check to confirm their policies before you submit any personal information to those websites.

Guiding Principles

Yesgudarstor is committed to maintaining the governing principles in the Nigerian Data Protection Act 2023, the NDPA-General Application and Implementation Directive (GAID) 2025 and other applicable privacy and data protection laws regarding the processing of Personal Data.

The collection and processing of your Personal Data shall be in accordance with a legitimate and lawful purpose and the applicable lawful basis, and your Personal Data shall only be stored for the period reasonably required. Your Personal Data shall be adequately secured against foreseeable hazards within our contemplation.

To demonstrate this commitment as well as our aim of creating a positive privacy culture within Yesgudarstor, Yesgudarstor adheres to the following basic principles relating to the processing of Personal Data: lawfulness, fairness and transparency; data accuracy; purpose limitation; data minimization; storage limitation; integrity and confidentiality; and accountability.

What Type of Information Do We Collect?

The type of information we collect is Personal Data. Personal Data refers to any piece of information that relates to an identified or identifiable living individual or pieces of information, which if collated together can lead to the identification of an individual person.

Personal Data includes data such as email address, phone number, full name, account details, home address, transaction details, etc pertaining to a natural person. It does not include data provided anonymously.

The type of personal data we may collect are as follows:

• Identity Data: includes first name, last name, date of birth or age information provided for eligibility, identity-verification information, profile photographs, selfies and verification results and, where required for an enabled verification check, biometric data.

• Contact Data: includes data such as home address, email address and telephone number.

• Technical Data: includes internet protocol (IP) address, login and session information, device and browser information, operating system, time zone and information used to diagnose errors or protect the Platform. Location Data includes a Task address, map coordinates and, where the relevant feature and device permissions are enabled, the Worker's location shared for the relevant Task.

• Usage Data: includes information about how you use the GetJabb website and application. Task and Transaction Data includes Task details, offers, quotations, messages, reviews, payment references, bank-account information required for payment services, status records and photographs or other evidence submitted for verification, safety or dispute review.

• Marketing and Communications Data: includes your preferences in receiving marketing from GetJabb, where offered, and your communication preferences.

You may browse the public GetJabb website without creating an Account, although technical information may be processed as described in this Policy. When registering, submitting a form or using an Account, you may be asked for contact and other information needed for the relevant service. We use that information to provide the requested service, respond to enquiries and communicate relevant service updates. Optional marketing is subject to the applicable consent or preference controls.

We may also collect information about your device, including where available your IP address, for system administration, security and service diagnostics. An IP address or other identifier may be Personal Data. Aggregate reports are treated as anonymous only where individuals cannot reasonably be identified from them.

Why We Collect Data?

We collect data to enable us to process requests which you make, and to provide you with our services. This includes administering Tasks and payments, carrying out proportionate identity and selfie checks, sharing relevant Task and location information with the parties to an Engagement, reviewing safety reports and disputes, and preventing fraud.

We collect data to be able to communicate with you, to provide further information on our products and services and to assist you.

We collect data to be able to respond to questions or requests which you submit as well as anticipate and resolve problems with any services we offer to you.

How Do We Collect Your Information?

We use different methods to collect data from and about you including through:

• Direct interactions - You may give us your data by filling in forms (e.g., the contact form on our website); creating your profile; by correspondence and conversations (including via email and telephone); or through contracts we may enter into with you.

• Automated Technologies or Activity interactions - As you interact with the Getjabb website or application, we will automatically collect data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. We collect such data to be able to properly provide you with our services.

• Third parties - We may receive relevant information from the other party to a Task, identity-verification providers and payment providers, including verification results and payment status. We use this information for the purposes set out in this Policy. Where a third party processes data independently, its own privacy information may also apply. We do not sell, lend or rent your Personal Data to third parties.

Use of Information

On the applicable lawful basis described in this Policy, we use your information to fulfil requests, provide services, administer Accounts and Tasks, and process applications, payments, verification checks and reports.

We do not use your data for any other purpose than for the purposes listed out in this policy and we do not sell, lend or rent any personal data about you to any third parties.

In reviewing enquiries, Yesgudarstor may need to disclose your personal data to the Yesgudarstor internal teams, consultants, vendors/services providers and/or others (as it deems reasonably necessary).

Data Security

We have well-maintained systems for storing and managing your data, and we commit to conscientiously utilising your data in consonance with the provisions of this policy. We have suitable security measures in place to prevent your personal data from being accidentally lost or used or accessed in an unauthorised way by a third party. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Information which you provide to us is stored using the systems and service providers supporting GetJabb. We take reasonable technical and organisational measures to protect it in accordance with this Privacy Policy. Where Personal Data is transferred or processed outside Nigeria, the transfer is subject to the safeguards and other requirements applicable under Data Protection Laws.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We admit, however, that no website or database is completely secure or “hacker-proof” and we only guarantee the safety of your data to the extent of our undertaking all reasonable measures to protect the data.

Sharing/Third-Party Disclosure

It may be necessary for us to share your Personal Data with authorised internal teams and service providers supporting hosting, communications, identity verification, payments, maps, support and service diagnostics. Relevant Task, profile and location information may also be shared with the other party to an Engagement as needed for the service. Authorised staff may access identity and arrival evidence for verification or dispute review. Private dispute-evidence images are restricted to their submitter and authorised staff; they are not published as part of a public profile.

We may disclose information about you as required or permitted by applicable law, including to competent law-enforcement or regulatory authorities. Other disclosures are limited to the purposes and applicable lawful bases described in this Policy, or your consent where required.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. Where a third-party service provider processes personal data on our behalf, it may process that data only for specified purposes and in accordance with our instructions. Where a provider processes information as an independent controller for its own legal or service obligations, its role and applicable privacy information will be made available as relevant to that processing.

Your Rights

You have rights under data protection laws (i.e. NDPA 2023 and GAID 2025) in relation to your personal data. It is Yesgudarstor’s policy to respect your rights and Yesgudarstor will act promptly and in accordance with any applicable law, rule or regulation relating to the processing of your personal data.

Details of your rights are set out below:

• Right to be informed about how personal data is used – you have a right to be informed about how we will use and share your personal data. This explanation will be provided to you in a concise, transparent, intelligible and easily accessible format and will be written in clear and plain language;

• Right to access personal data – you have a right to obtain confirmation of whether we are processing your personal data, access to your personal data and information regarding how your personal data is being used by us;

• Right to have inaccurate personal data rectified – you have a right to have any inaccurate or incomplete personal data rectified. If we have disclosed the relevant personal data to any third parties, we will take reasonable steps to inform those third parties of the rectification where possible;

• Right to have personal data erased in certain circumstances – you have a right to request that certain personal data held by us is erased. This is not a blanket right to require all personal data to be deleted. We will consider each request carefully in accordance with the requirements of any laws relating to the processing and erasure of your personal data;

• Right to restrict processing of personal data in certain circumstances – you have a right to block the processing of your personal data in certain circumstances. This right arises if you are disputing the accuracy of personal data, if you have raised an objection to processing, if processing of personal data is unlawful and you oppose erasure and request restriction instead or if the personal data is no longer required by us, but you require the personal data to be retained to establish, exercise or defend a legal claim;

• Right to data portability – in certain circumstances you can request to receive a copy of your personal data in a commonly used electronic format. This right only applies to personal data that you have provided to us (for example by completing a form or providing information through a website). Information about you which has been gathered by monitoring your behaviour will also be subject to the right to data portability. The right to data portability only applies if the processing is based on your consent or if the personal data must be processed for the performance of a contract and the processing is carried out by automated means (i.e., electronically);

• Right to object to processing of personal data in certain circumstances, including where personal data is used for marketing purposes – you have a right to object to processing being carried out by us if (a) we are processing personal data for the performance of a task in the public interest, (b) if we are using personal data for direct marketing purposes, or (c) if information is being processed for scientific or historical research or statistical purposes. You will be informed that you have a right to object at the point of data collection and the right to object will be explicitly brought to your attention and be presented clearly and separately from any other information.

• Right to lodge a complaint with the Nigeria Data Protection Commission (“NDPC or Regulator”) - If you believe that the processing of your personal data violates data protection law, you also have the right to complain to the Nigeria data protection supervisory authority.

• Right not to be subject to a decision based solely on automated processing of personal data – you have the right to object to solely automated processing of your personal data including profiling, which produces legal or similar significant effects concerning the data subject.

You may exercise any of your rights by contacting us at support@getjabb.com, marked "Privacy request". You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one calendar month. Occasionally it may take us longer than one calendar month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Data Retention and Erasure

We generally retain your personal information for as long as is necessary for the purposes for which it was collected, including operating your Account, providing the service, resolving disputes and meeting legal obligations. We remain committed to maintaining its confidentiality.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, and the applicable legal requirements.

You may request Account deletion through the Platform or contact support@getjabb.com to exercise your erasure rights. Active Tasks, unresolved payments, disputes, fraud investigations, legal holds and records required by law may need to be resolved or retained before deletion is completed. Relevant records may be retained to establish, exercise or defend legal claims, or meet tax, reporting and audit obligations. Account deletion does not automatically erase evidence needed for an unresolved case.

If you would like to know more about the retention periods applicable to your Personal Data, please contact support@getjabb.com, marked "Privacy request".

Links to Third-Party Websites

When you use our Services, you may be directed to other websites that are beyond our control. We may also allow third-party websites or applications to link to our Services. We are not responsible for the privacy practices of any third parties or the content of linked websites, but we do encourage you to read the applicable privacy policies, and terms and conditions of such parties and websites. This Privacy Policy only applies to our Services.

Remedies

In the event of any violation of this Privacy Policy by Yesgudarstor, the user shall be entitled to demand the return of all Personal Data collected and to demand the end of use of any such Personal Data. This remedy shall be available from the time of breach of this Privacy Policy, provided the user has already sent a complaint which was not attended to.

Changes to this Privacy Policy

Yesgudarstor reserves the right to modify this Privacy Policy in accordance with applicable law and changes to our processing activities. We will post the revised policy on the GetJabb website and application and notify Users of material changes where required. The applicable version and effective date will be identified with the published policy. Where a change requires fresh consent, it will be requested for the relevant processing; continued use does not replace consent where consent is legally required.

Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us using the details provided below:

Full name of legal entity: YESGUDARSTOR TECHNOLOGIES LTD

Email address: support@getjabb.com (mark privacy enquiries "Privacy request").