1. Introduction
Proficients Cares Solutions and Services (PCSS Cares, or “we”, “our”, “us”) is a registered company operating in Nigeria. We build and operate a caregiving platform that connects trained caregivers with families seeking professional elderly care, and provides caregiver training and certification services.
This Privacy Policy explains what personal data we collect when you use our platform, why we collect it, how it is stored and protected, and what rights you have under the Nigeria Data Protection Act 2023 (NDPA 2023). By using PCSS Cares, you agree to the practices described in this policy.
2. Data We Collect
For Caregivers:
- Full name, email address, and phone number
- Government-issued ID (NIN scan)
- Nursing or care certificates and professional qualifications
- Profile photo
- Care-related compliance documents
- Location (city and state)
- Employment history and work experience
- Certification level and specialisation areas
- Care logs and visit records generated during assignments
For Families:
- Full name, email address, and phone number
- Care recipient details: full name, date of birth, medical conditions, and emergency contact information
- Subscription and billing information (processed via Paystack)
For All Users:
- Usage data and platform interaction logs
- IP address (collected for security and fraud prevention)
- Message and communication records within the platform
3. Why We Collect This Data
- Identity verification and background checks — to ensure the safety and trustworthiness of caregivers in compliance with NDPA 2023
- Caregiver-client matching — to connect families with appropriately skilled and located caregivers
- Service delivery — to manage assignments, care logs, schedules, and care plans
- Training and certification — to track course enrolment, progress, and issue certificates
- Payment processing — to manage caregiver compensation and family subscription billing via Paystack
- Communication — to send account notifications, care updates, and transactional emails via Brevo
- Legal obligations — to comply with Nigerian company law and the NDPA 2023
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Consent — you provide explicit consent at signup when you agree to this Privacy Policy and our Terms of Service
- Legitimate interest — we have a legitimate interest in operating a safe, functional care platform, including fraud prevention and platform security
- Legal obligation — we are required to retain certain data under the NDPA 2023 and Nigerian company law
5. Data Storage & Security
All documents (NIN scans, certificates, photos, and care documents) are stored in encrypted Cloudflare R2 object storage. No documents are publicly accessible — access is granted only via time-limited, signed URLs generated on demand for authorised users.
Our database is hosted on Neon (PostgreSQL), a managed cloud database with encryption at rest. All data transmitted between your device and our servers uses TLS (Transport Layer Security) to prevent interception.
Access to personal data within PCSS is restricted to authorised staff on a need-to-know basis. We conduct periodic access reviews to maintain this principle.
6. Your Rights Under the NDPA 2023
As a data subject under Nigerian law, you have the following rights:
- Right to access — request a copy of the personal data we hold about you
- Right to rectification — request corrections to inaccurate or incomplete data
- Right to erasure — request deletion of your data, subject to legal retention requirements
- Right to withdraw consent — withdraw your consent to processing at any time (this does not affect processing already carried out)
- Right to object — object to processing based on legitimate interest
To exercise any of these rights, contact our Data Protection team at proficientscares@gmail.com. We will respond within 30 days.
7. Data Retention
- Account data is retained for the duration of your active account plus 1 year after account closure
- Caregiver documents (NIN, certificates, care documents) are retained for the duration of your engagement with PCSS plus 2 years, in line with Nigerian labor practice
- Care logs and health records are retained for the duration of the assignment plus 2 years to support continuity of care and legal compliance
You may request deletion of your data at any time by contacting us. Note that some data may need to be retained to fulfil legal obligations even after a deletion request.
8. Sharing Your Data
We do not sell your personal data to third parties. We share data only with the following service providers, who process it strictly on our behalf:
- Paystack — payment processing for caregiver compensation and family subscriptions. Paystack is PCI-DSS compliant.
- Brevo (formerly Sendinblue) — transactional email notifications (account creation, care updates, receipts). Brevo is GDPR-compliant.
- Cloudflare — file storage and content delivery. Cloudflare is SOC 2 Type II certified.
- Neon — managed PostgreSQL database hosting. Neon is SOC 2 compliant.
We may disclose your data to law enforcement or regulatory authorities if required by Nigerian law.
9. Children
Our platform is intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us immediately at proficientscares@gmail.com and we will promptly delete the information.
10. Contact & Data Protection Officer
For any questions about this Privacy Policy, to exercise your rights, or to report a data concern, please contact us: