Privacy Policy

Privacy Policy

Last updated: 25 October 2026

This policy explains how we collect and use personal data when you use rev.africa ("rev.africa", "we", "us"). We process personal data in line with the EU General Data Protection Regulation (GDPR), because the operator is established in the European Union, and, where they apply, the data protection laws of the countries whose users and companies appear on the site, such as the Nigeria Data Protection Act 2023, Kenya Data Protection Act 2019, Ghana Data Protection Act 2012, Tanzania Personal Data Protection Act 2022, Uganda Data Protection and Privacy Act 2019 and South Africa's Protection of Personal Information Act (POPIA).

1. Who is the controller

JOB PROFFESIONAL sp. z o.o.
Registered office: ul. Ceglarska 1, 63-700 Krotoszyn, Poland
Correspondence address: ul. Garncarska 12, 63-700 Krotoszyn, Poland
NIP (tax ID): 6211830782 · KRS (company register): 0000746852
Email: [email protected]

2. What data we process and why

• Account data (name, username, email address, password hash, social login identifier) to create and run your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Reviews and replies you publish, together with your display name, date and rating. Legal basis: contract and our legitimate interest in running a public review service (Art. 6(1)(f)).
• Company profile data: company name, legal form, registration details, address, website, category and a general business contact (for example info@ or a switchboard number), published by the company or available from public sources. rev.africa lists companies (legal entities) only; we do not create profiles of sole traders or private individuals, and we do not publish the names of directors, owners or employees. If personal data appears in a profile by mistake, we remove it on request. Legal basis: legitimate interest in providing consumers with information about companies (Art. 6(1)(f)). The company can object at any time.
• Technical data (IP address, browser, device, log data, security events) to keep the service secure, prevent fraud and fake reviews. Legal basis: legitimate interest and legal obligations.
• Messages you send us (contact form, email) to answer them. Legal basis: legitimate interest.
• Cookies: see our Cookies Policy.

3. Where your data comes from

Mostly from you. Information about businesses may also come from publicly available sources such as the business's own website and public registers. We publish a company profile only when we have a general contact email for the company, and we send the company a short notice when the profile is published, explaining where the information comes from and how to correct or remove it.

4. Who we share data with

We do not sell personal data. We use trusted service providers who process data on our behalf: hosting (servers in the European Union), email delivery, maps and spam protection (Google). Reviews and business profiles are public by design. We may disclose data to public authorities or courts where the law requires it, for example in response to a valid court order.

5. International transfers

Our servers are located in the European Union. If you use rev.africa from an African country, your data is transferred to and stored in the EU, which provides a high level of protection under the GDPR. Where a service provider processes data outside the EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses.

6. How long we keep data

• Account data: while your account is active; after deletion we keep minimal records for up to 6 years where needed to establish or defend legal claims.
• Reviews: while they are published; removed reviews are kept in an internal archive for up to 6 years for evidence purposes.
• Technical logs: usually up to 12 months.
• Copies of emails we sent (proof of notices): up to 6 years.

7. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest (including the right to object to a business profile). Where processing is based on consent, you can withdraw it at any time. Write to [email protected]; we answer within one month.

You also have the right to complain to a data protection supervisory authority: in the EU, for example the Polish authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority of the country where you live, such as the Nigeria Data Protection Commission, the Office of the Data Protection Commissioner (Kenya), the Data Protection Commission (Ghana), the Personal Data Protection Commission (Tanzania), the Personal Data Protection Office (Uganda) or the Information Regulator (South Africa). We would appreciate the chance to resolve your concern first.

8. Security

We use encryption in transit (HTTPS), access control, backups and monitoring to protect data. No online service is completely secure; if a data breach is likely to put your rights at risk, we will inform you and the competent supervisory authority as required by law.

9. Children

The service is not intended for children under 13. Reviews may only be written by people aged 16 or over.

10. Changes

We may update this policy. We will publish the new version on this page and, for significant changes, inform registered users by email.