Governance & Compliance

Privacy Policy

How Consult Sabil Consultants Limited (CSCL) collects, uses, stores, shares and protects personal information when you use our website, recruitment services, advisory services and other professional services.

Last updated: .

About this policy

This policy explains how CSCL handles personal information belonging to job seekers, candidates, client representatives, website visitors, consultants, event participants and other individuals who interact with us.

CSCL is committed to handling personal information lawfully, fairly, transparently and securely, and to meeting applicable data-protection requirements, including the Nigeria Data Protection Act (NDPA).

Information we collect

The information we collect depends on how you interact with CSCL. It may include:

• Name and contact information, including email address and phone number.
• Organisation, location, job title and professional information.
• CVs, cover letters, qualifications, employment history, professional experience and other application information.
• Information provided during interviews, assessments, screening or reference checks.
• Vacancy, recruitment, consulting, training or advisory requirements submitted by client organisations.
• Enquiries, messages, registration information and correspondence submitted through our website or directly to CSCL.
• Limited technical information such as browser type, device information, pages visited and information required to operate and secure the website.

How we use personal information

We process personal information only where it is relevant to a legitimate business, recruitment, professional-service, legal or administrative purpose. Depending on the circumstances, this may include:

• Managing job applications and candidate profiles.
• Assessing candidates against role requirements.
• Matching candidates with current or future opportunities.
• Communicating with candidates and client organisations.
• Providing recruitment, HR advisory and other professional services.
• Managing enquiries, registrations and event participation.
• Improving and securing our website and internal systems.
• Maintaining appropriate business and compliance records.
• Meeting applicable legal and regulatory obligations.

Lawful basis for processing

CSCL aims to ensure that personal information is processed lawfully, fairly and transparently. The lawful basis used will depend on the nature of the information and the purpose for which it is being processed.

Where consent is required, we will request it in a clear and informed manner. Other processing may be necessary to respond to a request you have made, provide a professional service, meet a legal obligation, or pursue a legitimate business purpose permitted by applicable law.

CANDIDATE DATA

Your information when applying for a role

Recruitment involves more detailed processing than general use of this website. Candidates may provide CVs, employment histories, qualifications and assessment information that CSCL uses to evaluate suitability for employment opportunities.

Our separate Candidate Privacy Notice explains this processing in greater detail, including candidate profiling, AI-assisted processing, sharing with prospective employers, retention and your rights.

Read the Candidate Privacy Notice →

CV and document storage

When you upload a CV or supporting document, the file is stored in a location that is not intended to be publicly accessible. Access to candidate documents is restricted to authorised personnel and other authorised parties where access is necessary for an approved recruitment or business purpose.

CSCL applies technical and organisational safeguards intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

AI-assisted candidate processing

CSCL may use automated or AI-assisted tools to support parts of the recruitment process, including organising application information, summarising CVs, identifying relevant experience and comparing candidate information against defined role requirements.

These tools support rather than replace professional judgement. A CSCL consultant reviews candidate information before shortlisting or recruitment recommendations are made, and automated processing is not intended to make the final hiring decision independently.

CSCL does not use candidate CVs for the purpose of training third-party general-purpose AI models. Where automated processing presents a higher privacy risk, CSCL aims to apply appropriate assessment and safeguards before that processing is introduced.

Candidates who have questions or concerns about automated processing may contact us using the details below.

Sharing candidate information with employers

A core purpose of CSCL's recruitment service is to introduce suitable candidates to client organisations. Where you are being considered for an opportunity, relevant candidate information may therefore be disclosed to the client organisation associated with that role.

We aim to disclose only information reasonably required for the recruitment process. CSCL does not sell personal information and does not provide candidate information to unrelated third parties for their own direct marketing purposes.

Service providers and data processors

CSCL may use trusted technology, hosting, communication, document-storage, recruitment, analytics or other service providers to support its operations. These providers may process personal information on our behalf where this is necessary to provide their services.

Where third parties process personal information on behalf of CSCL, we aim to use appropriate contractual and organisational safeguards governing how that information may be handled, protected and used.

Cross-border data transfers

Some technology providers, client organisations or other authorised recipients may operate outside Nigeria. Where personal information is transferred internationally, CSCL aims to ensure that the transfer is made in accordance with applicable data-protection requirements and that appropriate safeguards are used where required.

Data Protection Impact Assessments

CSCL recognises that some forms of processing can create greater risks to individuals, particularly activities involving profiling, new technologies, automated processing or large-scale analysis of personal information.

Where appropriate, CSCL may conduct a Data Protection Impact Assessment or similar privacy-risk assessment before introducing higher-risk processing activities.

Data retention

Personal information should not be retained for longer than is reasonably necessary for the purpose for which it was collected, subject to legal, regulatory and legitimate business requirements.

Candidate information may be retained after an individual application where the candidate has agreed to remain within CSCL's talent pool or where another lawful basis permits continued retention for suitable future opportunities.

CSCL periodically reviews retained information and aims to securely delete, anonymise or otherwise dispose of information when it is no longer required.

Consent and candidate preferences

Where CSCL relies on consent, that consent should be informed, specific and capable of being demonstrated. For example, candidates submitting information through our recruitment platform may be asked to confirm that CSCL can store and process their information for recruitment purposes.

Where processing is based on consent, you may withdraw that consent by contacting us. Withdrawal does not affect processing that was lawfully carried out before the withdrawal and may not prevent processing that CSCL is permitted or required to undertake on another lawful basis.

Your data-protection rights

Subject to applicable law and the circumstances of the request, you may have rights concerning the personal information CSCL holds about you, including the ability to:

• Ask whether CSCL holds personal information about you.
• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of information where applicable.
• Withdraw consent where processing relies on consent.
• Raise concerns about how your information has been processed.
• Exercise other rights available to you under applicable data-protection law.

We may need to verify your identity before responding to a request in order to protect your information from unauthorised disclosure.

Deletion requests

You may ask us to delete personal information we hold about you, including candidate information and CVs, where deletion is applicable. Some information may need to be retained where CSCL has an overriding legal, regulatory or legitimate record-keeping requirement.

Once information has been permanently deleted, you may need to provide it again if you later wish to use a CSCL service or be considered for another opportunity.

Personal-data breaches

CSCL maintains processes intended to identify, assess, contain and respond to suspected personal-data breaches.

Where a breach creates a notification obligation, CSCL aims to notify the appropriate regulatory authority and affected individuals as required by applicable law. We also review incidents to identify corrective actions and reduce the risk of recurrence.

Cookies and website information

This website uses limited cookies and similar technologies required to operate, secure and improve the website. This may include cookies needed to maintain sessions, protect forms against misuse and remember necessary website settings.

Where non-essential analytics, advertising or other optional technologies are introduced, they should be addressed through the site's cookie and consent controls as appropriate.

Wider Governance

Governance & Compliance at CSCL

Data protection forms part of CSCL's wider approach to responsible professional practice. Our governance framework also addresses the health, safety and environmental responsibilities associated with consulting, training, project work and field assignments.

Data Protection

We aim to handle personal information lawfully, transparently and securely, with appropriate consideration for consent, individual rights, retention, third-party processing, international transfers and higher-risk processing.

Learn about data protection →

Health, Safety & Environment

CSCL's HSE principles apply to personnel, consultants, contractors and partners involved in relevant operations, fieldwork, training and project delivery, with emphasis on safe working practices, risk assessment, environmental responsibility and preparedness.

View our HSE approach →

Privacy contact

If you have a question about this policy, want to exercise a data-protection right, wish to withdraw consent, or have concerns about the way your information has been handled, please contact CSCL: