Skilarts

Privacy policy

Last updated 22 October 2026

This policy explains how Skilarts (operated by its founder, Lagos, Nigeria), the data controller, handles personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and guidance from the Nigeria Data Protection Commission (NDPC).

1. What we collect

Members

  • Name, email, password (stored only as a secure hash), optional phone number, area and short bio.
  • Social media links you choose to add. These are public next to your vouches.
  • Content you post: vouches, experiences, photos, notes, requests and reports.
  • Basic technical data: a session cookie to keep you signed in, and server logs (IP address, browser) kept for security.

Artisans

  • Name, business name, trade, general work area, landmark, phone/WhatsApp, languages and specialties, submitted by a member with the artisan's consent or by the artisan.
  • Past-job references used to verify the 10-jobs rule. These are only visible to moderators.

Usage counts

We count profile views and contact taps per artisan per day to show "Who's hot". These counts are not linked to you.

Analytics

We use PostHog, a product analytics service, to find out where Skilarts is confusing or hard to use, for example where people give up while signing up or recommending an artisan. When you first visit, we ask for your choice:

  • Accept: PostHog sets cookies, records the pages you visit and the buttons you tap, and may record your session so we can watch how the site is used. Everything you type into forms (including passwords) and personal details such as your email and artisans' phone numbers are hidden in recordings. Admin pages are never recorded. Once you sign in, your activity is linked to an internal account number and your role, never your name or email.
  • Essential only: no analytics cookies and no recordings. PostHog may still count page visits without cookies, using an anonymous identifier that cannot be traced back to you.

You can change your choice at any time with "Cookie & analytics settings" at the bottom of every page. The only other cookie Skilarts sets keeps you signed in.

2. Why we use it (lawful basis)

  • Running the platform (contract): your account, showing listings, letting you post.
  • Trust and safety (legitimate interest): verifying artisans, moderating content, investigating reports, preventing fraud, keeping an audit log of admin actions.
  • Consent: artisans' listing and contact details; optional fields; analytics cookies and session recordings; you can withdraw consent at any time.
  • Improving the service (legitimate interest): cookieless visit counts that show where the site is hard to use.
  • Legal obligation: responding to lawful requests from Nigerian authorities.

3. Who can see what

  • Public: artisan profiles (without phone numbers), vouches with the recommender's name and social links, experiences, published community notes, the banned list.
  • Signed-in members: artisan phone/WhatsApp numbers.
  • Moderators only: emails, phone numbers of members, report details and evidence, job references.

We do not sell personal data.

4. Where it is stored

Skilarts runs on Cloudflare's infrastructure (database and file storage), which may process data outside Nigeria. Analytics data is processed by PostHog in the United States, and emails are sent through our email provider. We rely on the safeguards permitted under Part VIII of the NDPA for these transfers, including each provider's contractual data-protection commitments.

5. How long we keep it

  • Account data: while your account is active, then deleted or anonymised within 90 days of closure.
  • Vouches and experiences: while relevant to the artisan's listing. When you close your account they are anonymised or removed.
  • Reports, bans and audit logs: up to 6 years, to protect the community and meet legal obligations.

6. Your rights

Under the NDPA you can ask to:

  • access a copy of your data, or receive it in a portable format;
  • correct inaccurate data;
  • delete your data, or restrict or object to how we use it;
  • withdraw consent (for example, an artisan asking to be delisted).

Use the takedown form or email hello@skilarts.ng. We respond within 30 days. You can also complain to the Nigeria Data Protection Commission.

7. Security

Passwords are hashed, connections are encrypted (HTTPS), private evidence is only shown to moderators, and admin actions are logged. If a breach is likely to put your rights at risk, we will notify the NDPC within 72 hours and tell affected people without undue delay.

8. Children

Skilarts is for people aged 18 and over. We don't knowingly collect children's data.

9. Contact

Data protection contact: hello@skilarts.ng