Privacy notice

Version 2026-10. This notice applies to Yellow Zebra and LIGHT, which use this portal to manage their people.

Who is responsible for your data

The company you work for (Yellow Zebra or LIGHT) decides why and how your personal data is used in this portal. In this notice “we” means that company. Questions and requests about your data go to wale.sanusi@lightinc.com.ng, or to HR.

What we hold and why

• Your work record: name, work email, employee number, job title, department, level, manager, start and end dates, employment type, and your career history. We use it to employ you and to run the company.
• Personal details you or HR enter: personal phone, address, emergency contact, birthday. Used to reach you, to care for you in an emergency and, only if you choose to share it, to celebrate your birthday.
• Leave: requests, reasons, balances and any supporting document. Used to run leave. A medical document you upload is health information and is handled with extra care.
• Documents: the identity, qualification and contract documents the company asks for, and the policies you have acknowledged.
• Pay: your salary and allowances. Only you, HR and the System Admin can see them.
• Performance: appraisals and probation reviews.
• Conduct: complaints and disciplinary queries that involve you. These are confidential and open only to the few people handling the case, and every opening is logged.
• Equipment and clients: the equipment assigned to you and the client accounts you work on.
• Sign-in records: your account, your last sign-in, whether two-step sign-in is on, and a log of sensitive actions. Used to keep the portal secure.

Our legal grounds are your employment contract, our legal duties as an employer (for example tax, pension and labour law records), our legitimate interest in running and securing the business, and, where the law needs it, your consent. We do not sell your data and we do not use it to make decisions with no person involved.

Who can see it

What each person sees depends on their access: you see your own records; your line manager sees what they need to manage you; HR and the System Admin see what they need to run HR; confidential cases are limited to named people. The portal enforces this in the database, and HR and System Admin access to sensitive records is written to a log that cannot be edited.

Where it is kept and who helps us

The portal runs on servers from our hosting provider (Railway) and sends email through our email provider (Resend). These providers may store or handle your data outside Nigeria. They act on our instructions and under their data-processing terms, and the company is responsible for making sure the transfer is covered by the safeguards the Nigeria Data Protection Act requires. Files you upload can be scanned for viruses before they are stored.

How long we keep it

We keep your records while you work here. After you leave we keep them only as long as the law and company policy require, then HR reviews them for deletion. Short-lived technical records (expired sessions, used sign-in links, old read notifications and old sent emails) are deleted automatically.

Your rights

You can ask to see your data, to correct it, to restrict or object to how it is used, to receive a copy, and, where the law allows, to have it deleted. You can download a copy of your own data now from Account → Your data. For anything else, write to wale.sanusi@lightinc.com.ng. We aim to answer within 30 days. If you think we have handled your data wrongly you can complain to the Nigeria Data Protection Commission (NDPC).

Keeping it safe

Sign-in is protected by a password and, for HR and System Admin, a second step. Connections are encrypted. Access is checked on every request, uploaded files are checked by content, and the portal is backed up. If a breach affects your data we will tell you and the NDPC as the law requires.