Skip to content

Legal

Privacy Policy

Draft for pre-launch review. This policy must be reviewed by qualified legal counsel in each jurisdiction before launch.

1. Who we are

PassPorta provides independent employment history verification. Depending on the context, we act as a processor on behalf of the requesting organisation or as an independent controller of verification records.

2. Information we process

  • Candidate identity details: legal name, previous names, date of birth, nationality and contact details.
  • Claimed employment details: employer, job title, dates, employment type and responsibilities.
  • Documents supplied for verification, such as employment certificates and CVs.
  • Responses and evidence from former employers, and records of our verification activity.
  • Account and usage information for users of our portals.

3. Consent and lawful basis

Requesting organisations must declare a lawful basis for each request. We obtain the candidate’s authorisation before contacting any former employer.

4. Data minimisation

We collect only the information needed to verify the specific employment claim submitted.

5. Cross-border transfers

Verification involves transferring personal information between countries, including Nigeria, the United Kingdom, the European Economic Area and North America. Transfers are made under appropriate safeguards required by applicable law, including the Nigeria Data Protection Act 2023 and the UK and EU GDPR.

6. Retention and deletion

Verification records are retained for a defined period agreed with the requesting organisation and then securely deleted. Candidates may request deletion where the law allows.

7. Your rights

Candidates can access the information held about them, request correction, challenge inaccurate information and submit explanations through the candidate portal.

8. Security

We use role-based access controls, encrypted storage, secure document handling and audit logging of all material actions.