PRIVACY STATEMENT

Nigerian Exchange Group (“NGX GROUP”, “we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy when you access or use the NGX GROUP XHire platform (“NGX GROUP X-Hire” or the “Platform”).

NGX GROUP processes personal data through NGX GROUP Invest in accordance with the Nigeria Data Protection Act 2023 (“NDP Act”), the Nigeria Data Protection Act – General Application and Implementation Directive 2025 (“GAID”), and other applicable data protection and regulatory requirements.

What Personal Data We Process

Depending on your interaction with NGX GROUP Hire, we may collect and process personal data including your:

• name, date of birth, gender and contact details;
• qualifications;
• phone number;
• email address;
• work experience;
• other information reasonably required to provide the services available through NGX GROUP X-Hire or comply with applicable legal and regulatory obligations.

We will only collect and process personal data that is adequate, relevant and reasonably necessary for the purposes for which it is required.

Why We Process Your Personal Data

Your personal data may be processed for purposes including:

• creating, administering and securing your NGX GROUP X-Hire profile;
• verifying your identity and completing applicable KYC requirements;
• evaluation or scoring; and
• improving the functionality, security and user experience of NGX GROUP X-Hire;

We process your personal data only where we have a lawful basis for doing so, including where processing is necessary for the performance of a contract, compliance with a legal obligation, the legitimate interests of NGX GROUP or a third party, or where you have provided valid consent, as applicable.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing undertaken before the withdrawal.

Sharing of Personal Data

Where necessary for the operation of NGX GROUP X-Hire or the completion of your recruitment process, we may share relevant personal data with authorised third parties, including healthcare service providers, identity verification providers, PFA’s, regulators and other entities involved in processing through the Platform.

We require service providers to process personal data on our behalf to implement appropriate safeguards and process such information only for authorised purposes. NGX GROUP does not sell your personal data.

Data Security, Privacy by Design and Data Protection Impact Assessment

NGX GROUP is committed to embedding privacy and data protection principles into the design, development and operation of NGX GROUP Invest and applies appropriate technical and organisational measures to safeguard personal data against unauthorised or unlawful access, use, disclosure, alteration, loss or destruction.

In accordance with the NDP Act, GAID and other applicable data protection requirements, NGX GROUP has conducted a Data Protection Impact Assessment (DPIA) in respect of NGX GROUP X-Hire.

The DPIA assessed the nature, scope, context and purposes of the personal data processing activities undertaken through the Platform, including the potential risks to the rights and freedoms of data subjects, and identified appropriate technical, organisational and governance measures for mitigating those risks.

NGX GROUP has implemented, and will continue to maintain and review, appropriate safeguards arising from the DPIA, including measures relating to data minimisation, access controls, information security, data retention, third-party processing and the protection of data subject rights.

NGX GROUP will periodically review the DPIA and the privacy and security measures applicable to NGX GROUP X-Hire, particularly where there are material changes to the Platform, its functionality, the categories or purposes of personal data processed, the technologies deployed, third-party integrations or other circumstances capable of materially altering the privacy risks associated with the Platform.

Through these measures, NGX GROUP seeks to ensure that privacy by design and by default remains an integral part of the operation and continuing development of NGX GROUP X-Hire.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, contractual, accounting and legitimate business requirements.

At the expiration of the applicable retention period, personal data will be securely deleted, destroyed or anonymised in accordance with NGX GROUP's applicable data retention requirements and applicable law.

International Transfers

Where it becomes necessary to transfer your personal data outside Nigeria, NGX GROUP will ensure that such transfer is undertaken in accordance with the NDP Act, GAID and other applicable requirements and that appropriate safeguards are implemented to protect your personal data.

Your Data Protection Rights

Subject to applicable law and any lawful limitations, you may have the right to:

• obtain information about the processing of your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data where legally permissible;
• object to or request restriction of certain processing;
• withdraw consent where processing is based on consent;
• request portability of your personal data where applicable;
• object to certain automated decision-making or profiling; and
• lodge a complaint regarding the processing of your personal data.

Requests relating to your personal data may be submitted through the designated privacy contact provided on NGX GROUP X-Hire.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) where you believe that your personal data has been processed in violation of applicable data protection law.

Cookies and Similar Technologies

NGX GROUP X-Hire may use cookies and similar technologies that are necessary for the operation, functionality and security of the Platform. Where cookies or similar technologies are used for analytics, personalisation, advertising or other purposes requiring consent, you will be provided with appropriate choices to accept, reject or manage such cookies.

Your Choices and Control

Where available, NGX GROUP X-Hire provides mechanisms that enable you to manage your account information and privacy preferences. You may also contact us to exercise your data protection rights or obtain assistance regarding the processing of your personal data.

Further Information

This Privacy Statement provides a summary of how NGX GROUP X-Hire collects, uses, shares and protects your personal data. More detailed information regarding our data processing activities, retention practices, data sharing arrangements, international transfers and your rights is available in the NGX GROUP X-Hire Privacy Policy.

By proceeding to use NGX GROUP X-Hire, you acknowledge that you have read and understood this Privacy Statement. Where NGX GROUP requires your consent for a specific processing activity, such consent will be requested separately, and you will be provided with an appropriate means of indicating your choice.

Terms & Conditions

Our responsibilities to you are clearly defined in our terms & conditions