Privacy Policy

1. Who we are

PurpleGrid ("purplegrid.co", "we", "us") is an executive professional networking, talent acquisition, and B2B syndication platform owned by The Haven Nation. We are the data controller responsible for the personal and professional data processed through this platform.

For any question about this policy or your data, contact our Data Protection Officer at [email protected].

2. The data we collect

We collect only what we need to match candidates with roles and to operate the platform:

• Account data — your name, email address, and password (stored only as a secure hash).
• Profile data — headline, bio, location, skills, years of experience, and links you choose to add.
• Application data — the CV/résumé you upload, cover letters, and the roles you apply to.
• Talent-pool data — where you register your interest, your salary expectation and employment preferences.
• Technical data — your IP address and basic request logs, used to keep the service secure and prevent abuse.

3. Why we process it, and our lawful basis

Under the Nigeria Data Protection Regulation (NDPR), we rely on the following bases:

• Consent — when you register, join the talent pool, or subscribe to updates. You may withdraw consent at any time.
• Contract — to process your applications and provide the services you have asked for.
• Legitimate interest — to secure the platform, prevent fraudulent or abusive use, and improve our service, balanced against your rights.

4. Who we share it with

We share your information only where it is necessary to help you find work:

• Client employers — when you are a candidate in a role's pipeline, the client sees your name, headline, and the stage you have reached. They do not see your email, phone number, CV file, salary expectation, interview notes, scorecards, or offer details — these are withheld from the client view at the server.
• Service providers — infrastructure, file storage, and email delivery providers who process data on our behalf under contract.

We do not sell your personal data to anyone.

5. How long we keep it

We keep candidate and application data for as long as your account is active, and for up to 24 months after your last activity, so we can consider you for future roles. You may ask us to delete your data sooner (see section 7). Records we are required to retain for legal or accounting reasons are kept for the period the law requires.

6. How we protect it

Passwords are hashed with bcrypt and never stored in plain text. Access to candidate data is restricted by role, and the client portal enforces its redaction on the server rather than in the browser. Traffic is served over HTTPS. Uploaded files are held in access-controlled object storage.

7. Your rights under the NDPR

You have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete — you can edit most of it directly in your profile.
• Delete your account and associated data.
• Object to or restrict certain processing, and withdraw consent.
• Request a copy of your data in a portable format.

To exercise any of these, email [email protected]. We will respond promptly within 30 days.

8. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to keep the service secure. We do not use advertising or third-party tracking cookies. Because these cookies are essential to the service working, they are set without requiring a consent banner; disabling them in your browser will prevent you from signing in.

9. Changes to this policy

We may update this policy as the platform evolves. Material changes will be posted here with a revised effective date. Continued use of the platform after a change means you accept the updated policy.