Not sure where to start? Chat with us
Legal

Privacy Policy

Effective date: June 2026  ·  Succour Support Systems Limited

1. Introduction

Succour Support Systems Limited ("Succour", "we", "us", or "our") is committed to protecting your privacy and handling your personal data with care, transparency, and integrity.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our platform, including our website, Worker registry, and verification services. It also explains your rights in relation to your data and how to exercise them.

By using Succour's services, you agree to the collection and use of your information as described in this Privacy Policy.

2. Who We Are

Succour Support Systems Limited is a company incorporated in Nigeria and Delaware, United States. We operate Africa's Care Registry — a verified ecosystem connecting trusted Workers with families and institutions.

For the purposes of data protection law, Succour Support Systems Limited is the Data Controller of your personal information.

Our designated Data Protection Officer (DPO) can be reached at csc@getsuccour.com. All data-related correspondence should be addressed to the DPO.

3. Data We Collect

We collect personal information across three categories depending on how you engage with our platform:

  • Contact and identity information provided by Employers, institutions, and Workers when using our services.
  • Verification data submitted to enable background, credential, identity, and reference checks on Workers.
  • Basic usage data collected automatically to help us understand how our platform is used and improve the experience.

We collect only what is necessary for the specific purpose at hand. You will always be informed at the point of collection what data is required and why.

4. How We Use Your Data

Your data is used exclusively to deliver and improve the services you have engaged us for. This includes conducting verifications, issuing Trust ID® credentials, computing Trust Scores®, facilitating placements, processing payments, and communicating with you about your request.

We do not use your personal data for marketing purposes without your explicit consent, and we do not profile users for commercial purposes.

5. Legal Basis for Processing

Succour processes personal data on the following legal bases, in accordance with the NDPA 2023 and internationally recognised data protection principles:

  • Contractual necessity — processing required to deliver the services you have requested and paid for.
  • Consent — where you have explicitly agreed to the processing of specific data, such as optional document uploads.
  • Legitimate interests — processing necessary for the operation and security of the Succour registry, where such interests are not overridden by your rights.
  • Legal obligation — processing required to comply with applicable Nigerian and international law.

6. Data Sharing

Succour does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

  • Trusted third-party verification partners — companies engaged to conduct specific verification checks (identity, background, credentials) on our behalf. All such partners are contractually bound to use data only for the specified purpose and to maintain appropriate security standards.
  • Payment processors — Paystack processes payment transactions. Succour does not store card or banking details.
  • Legal authorities — where required by applicable law, court order, or regulatory authority.

In all cases, we limit data shared to only what is strictly necessary for the specific purpose.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, in line with global best practice and NDPA 2023 requirements:

  • Verification data and Trust ID® registry records — retained for the lifetime of the Worker's active registry status. Where a Worker is no longer active, data is retained for a further 5 years before being anonymised, unless a deletion request is received beforehand.
  • Payment records — retained for 7 years in compliance with Nigerian financial record-keeping requirements.
  • Communication records — retained for 2 years from the date of last communication.

Verification and registry data is retained for the duration of active registry status because the Trust ID® is designed as a lifetime credential. This approach is consistent with the purpose of the Succour registry and is defensible under the NDPA 2023 and GDPR Article 5(1)(e), which permit retention as long as a legitimate purpose exists.

You may request deletion of your data at any time by contacting our DPO. Requests will be processed within 30 days, subject to any legal obligation we may have to retain specific records such as payment data.

8. Data Security

Succour takes the security of your personal data seriously. We implement the following measures to protect information in our care:

  • All data is encrypted in transit using TLS (Transport Layer Security) and encrypted at rest.
  • Access to personal data is restricted to authorised personnel only, on a need-to-know basis.
  • Our third-party verification partners are required to maintain equivalent security standards.
  • We conduct regular reviews of our data handling practices and security controls.

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals in accordance with NDPA 2023 requirements.

9. Cookies and Tracking

We use essential cookies and browser storage for authentication, security, site configuration, and remembering your cookie choices. Our cookie preference cookie, succour_cookie_consent, lasts up to one year.

With your consent, we use Google Analytics to understand how visitors use our site (including cookies such as _ga), and Google Ads and Meta Pixel to measure advertising and site visits (including cookies such as _gcl_au and _fbp). These providers may process device identifiers, browser information, and page visits. Optional tracking scripts are blocked until you enable the relevant category.

You can allow all optional cookies, reject them, or choose analytics and marketing separately in the cookie banner. Use the Cookie settings button below to change or withdraw consent. Withdrawal stops future optional tracking and removes accessible first-party tracking cookies; it does not undo data already sent to a provider. You can also use your browser settings to clear or block cookies, including third-party cookies. Blocking essential cookies may affect site functionality.

10. Your Rights

Under the NDPA 2023 and applicable international data protection standards, you have the following rights with respect to your personal data:

Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete data.
Right to Erasure
You may request deletion of your personal data, subject to legal obligations.
Right to Restrict Processing
You may request that we limit how we use your data in certain circumstances.
Right to Data Portability
You may request your data in a structured, machine-readable format.
Right to Object
You may object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, please contact our DPO at csc@getsuccour.com. We will respond to all verified requests within 30 days. We may request proof of identity before processing your request.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or the relevant supervisory authority in your jurisdiction.

11. Children

Succour's services are not directed at, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age.

If you are a parent or guardian and believe that a minor has provided us with personal information, please contact us immediately at csc@getsuccour.com and we will take prompt steps to delete such data.

12. International Users

Succour's services are available to users in the diaspora, including those based in the United Kingdom, Europe, North America, and Canada. The following applies to international users:

  • All personal data collected from international users is processed and stored in accordance with the NDPA 2023 and, where applicable, other international frameworks including the UK GDPR and the European General Data Protection Regulation.
  • By using our services from outside Nigeria, you acknowledge that your data will be transferred to and processed in Nigeria, where our operations are based.
  • We apply the same high standard of data protection to all users regardless of location.
  • International users retain all the rights described in Section 10 and may exercise them by contacting our DPO.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Where changes are material, we will provide prominent notice on our platform or notify you by email at least 14 days before the changes take effect.

The effective date at the top of this page reflects the most recent update. We encourage you to review this policy periodically.

Your continued use of Succour's services after any update constitutes acceptance of the revised Privacy Policy.

14. Contact and DPO

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

All data protection correspondence should be clearly addressed to the Data Protection Officer in your message subject or opening line. We aim to acknowledge all requests within 5 working days and resolve them within 30 days.