Privacy policy

Last updated 10 August 2026 · OneCluster Ltd, registered in Nigeria

Who we are

OneCluster Ltd is a company registered in Nigeria with its office in Lagos. We are the data controller for personal data collected through this website and through our client and recruitment relationships. Contact us at privacy@onecluster.co.

What we collect

• Enquiry data. Name, work email, organisation, sector and the content of your message when you use our contact form.
• Recruitment data. Name, email, location, experience, links you provide, your CV and your application answers.
• Technical data. IP address, browser type, device type, pages visited and referring source, collected through cookies and server logs.
• Correspondence. Emails and call notes arising from a business or recruitment conversation.

We do not collect special category data, and we ask that you do not include it in free-text fields.

Why we process it, and on what basis

• To respond to enquiries — on the basis of steps taken at your request prior to entering a contract.
• To assess applications — on the basis of our legitimate interest in recruiting, and your consent where required.
• To deliver client engagements — on the basis of contract performance.
• To secure and improve the site — on the basis of our legitimate interest in a functioning, secure service.
• To meet legal obligations — where retention or disclosure is required by law.

How long we keep it

Enquiry data is kept for twenty-four months from last contact. Recruitment data is kept for twelve months from the close of the process unless you ask us to delete it sooner or consent to a longer period. Client engagement records are kept for the duration of the contract plus seven years where required for tax and audit purposes. Server logs are kept for ninety days.

Who we share it with

We share personal data with service providers who process it on our behalf under written agreement: our email and productivity provider, our website host, and our applicant tracking tooling. We do not sell personal data and we do not share it for third-party advertising. We may disclose data where required by law, regulation or a valid order of a competent court.

International transfers

Some of our processors operate outside Nigeria. Where personal data is transferred abroad we rely on an adequacy determination by the Nigeria Data Protection Commission, standard contractual clauses, or your explicit consent, and we assess the protections in place before transferring.

Your rights

Subject to the conditions in applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, and you may object to processing based on legitimate interest. Where processing relies on consent you may withdraw it at any time without affecting prior processing.

To exercise a right, email privacy@onecluster.co. We respond within thirty days. If you are not satisfied you may complain to the Nigeria Data Protection Commission, or to your local supervisory authority if you are in the EEA or UK.

Security

We apply access controls, encryption in transit, least-privilege administration and vendor due diligence appropriate to the sensitivity of the data. No system is perfectly secure, and we will notify you and the relevant regulator of a qualifying breach within the periods required by law.

Children

This website is not directed at children and we do not knowingly collect data from anyone under eighteen.

Changes

We may update this policy. Material changes will be signalled by the date at the top of this page, and where the change is significant we will notify affected individuals directly.