Who we are
NollywoodCV.com ("the Platform") is owned and operated by Nollywood CV Limited ("NollywoodCV", "we", "us" or "our"), a company registered in Nigeria. NollywoodCV is a professional CV, casting and film-industry platform for the Nigerian film industry.
For the personal data described in this policy, Nollywood CV Limited is the data controller: we decide why and how the data is used. You can reach us about any data protection matter at info@nollywoodcv.com or +234 805 053 3253.
This policy is issued under the Nigeria Data Protection Act 2023 ("NDPA"), the General Application and Implementation Directive 2025 issued by the Nigeria Data Protection Commission ("GAID"), and other applicable laws of the Federal Republic of Nigeria.
What this policy covers
This policy applies to everyone who uses the Platform: visitors who only read pages, registered members (free and Premium), recruiters and posters, advertisers, Film Market users, Film Hub organisers, Fund My Film filmmakers and the people who donate to them, including donors without an account.
It does not cover websites and services run by other people that you reach from the Platform, such as a recruiter's own website, a YouTube video or a payment page shown by Paystack. Those have their own privacy policies.
The personal data we collect
Information you give us
- Account: your name, email address and password. Your password is stored only in a scrambled (hashed) form that we cannot read.
- Profile: what you choose to add, such as your tagline, gender, primary role, current location, state of origin, phone number, biography and date of birth. Premium members can also add a profile photograph, height, complexion, languages, skills, website and social media handles, an IMDb link, showreel or self-tape links, full-body photographs, film credits, awards and education.
- Film credits and film pages: film titles, years, roles, character names, production companies, watch links, posters and film details you add or confirm.
- Jobs, castings and auditions: the listings you post (including any script pages, pictures and contact names), and the applications you send, which can include self-tape videos, headshots, full-body photographs, links and answers to the poster's questions.
- Film Market: your listings, photographs and pitch details, the "I'm interested" requests you send or receive, the notes exchanged on a request, saved listings, alerts and the answers you give when asked whether a deal was made.
- Film Hub: events you post, whether you mark yourself Going or Interested, ratings, and the people and films you tag.
- Fund My Film: campaign details, the cast and crew you tag, and, for filmmakers, the identity and bank details described in section 9. Donors give their email address and, if they choose, their name. Donors who ask for an Executive Producer credit also give the name to be credited and a phone number.
- Advertising: your ad picture, link, any words and photographs you give to the "Design my ad" service, and the reports you make about ads.
- Profile claims and suggestions: if you claim a profile created by NollywoodCV, the details and the picture of your identity document that you send; if you suggest a credit, award or correction for a Legacy profile, what you suggest.
- Articles: if you write for the NollywoodCV blog, your articles and writer biography.
- Messages to us: what you send by email, WhatsApp, Instagram or a report form.
Information created when you use the Platform
- Payments: the plan or service paid for, the amount, the payment reference, the date and the result. Card and bank details are entered on Paystack's payment page, not ours (see section 7).
- Account activity: when you signed up, verified your email and last signed in; your notifications; your applications and their status; listings, ads and campaigns and their status.
- Security records: your IP address and browser description are kept with your signed-in session and in our server logs, and are used to protect accounts and to stop spam sign-ups, fraud and abuse.
- Profile visits: when a signed-in member opens a profile, we record the visit with that member's account and primary role. Visitors who are not signed in are recorded only as an anonymous daily code that cannot be turned back into an IP address. Profile owners see totals and roles, never the names of the people who visited.
- Referral checks: when the referral programme is running, we keep a scrambled code of the IP address and device used with a referral link, to stop people referring themselves.
Information from others
- Other members may add you to a film (a tag), to a Film Hub event or to a Fund My Film campaign. You receive a notification and decide whether to accept.
- NollywoodCV may create profiles of well-known film professionals from public sources, or keep a Legacy profile for someone who has passed away. A person can claim their own profile or ask for it to be corrected or removed.
- Paystack tells us whether a payment succeeded and the charges deducted. Our identity verification partner tells us whether identity details matched NIMC records (section 9).
What other people can see
Your profile is a public CV. Anyone on the internet, including people without an account and search engines, can open it.
- Every profile shows the name, tagline, location, state of origin, age (worked out from your date of birth, which itself is not shown), gender, biography, primary role and one film credit.
- Contact details: if you add a phone number it is shown on your profile, and your account email address is shown on your profile as a contact link, so that recruiters can reach you. If you do not want your phone number shown, leave it empty. If you do not want your email address shown, contact us.
- Premium profiles also show the photograph, physical details, all credits, awards, education, skills, languages, social links, reels and full-body photographs.
- Film pages show the people credited on a film when that credit is visible on their own profile.
- Listings, events, campaigns and ads are public once live. Film Market contact details are shown only to people the poster accepts. Fund My Film supporters are listed by name, or as "A private supporter"; donation amounts are never shown publicly.
- Applications are seen only by the person who posted the job or audition (and by NollywoodCV). When you apply, the poster can see your profile, your phone number and email address, and anything you uploaded, and can download a list of applicants with those details.
Why we use your data and our legal basis
Under the NDPA we may use personal data only where a lawful basis applies. These are the purposes and the basis for each.
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, showing your profile and providing the features you choose (applications, listings, events, campaigns, ads) | Performance of our contract with you (these Terms) |
| Taking payments, recording receipts and keeping accounting records | Contract; legal obligation |
| Checking the identity of Fund My Film filmmakers and the bank account that will receive donations | Your consent, given on the application form; our legitimate interest in preventing fraud |
| Sending notifications about your account, applications, listings, payments and changes to our policies | Contract; legitimate interest |
| Official NollywoodCV announcements in your notifications | Legitimate interest. We do not sell or rent your contact details to advertisers. |
| Preventing spam, fraud, fake listings and abuse, and enforcing our rules | Legitimate interest; legal obligation |
| Counting visits and understanding which features are used, so we can improve the Platform | Legitimate interest (the site's own visit counter stores no personal data) |
| Answering legal requests, court orders and regulators | Legal obligation |
Where we rely on consent, you can withdraw it at any time by contacting us. Withdrawing consent does not affect what was done before, and some features (such as running a Fund My Film campaign) cannot be used without it.
We do not use your data for purposes that are incompatible with those above without telling you first and, where the law requires, asking for your consent.
Service providers we use
These companies process personal data on our behalf, only to provide their service to us:
| Provider | What it does for NollywoodCV |
|---|---|
| Our web hosting provider | Runs the server and database that hold the Platform and its records |
| Paystack, our payment provider | Takes payments (card, bank transfer, USSD and other methods it offers), saves a card for Automatic Payment, pays Fund My Film filmmakers and confirms bank account names |
| Our identity verification partner | Checks a Fund My Film filmmaker's NIN, name and date of birth against NIMC records |
| Our cloud storage providers | Store and deliver public pictures such as profile photographs, posters and campaign pictures; and store audition videos and photographs, and Film Market photographs, privately |
| Our email delivery provider | Sends NollywoodCV's emails (account and activity emails, newsletters and greetings) and tells us when an email could not be delivered or was marked as spam |
| Font, icon and page-tool providers | Deliver the fonts, icons and page tools the site uses; your browser contacts them directly, so they receive your IP address |
Our payment system can also work with a second payment provider. It is not in use at the moment; if we start using it, we will add it to this list.
Transfers outside Nigeria
Some of the providers above store or process data outside Nigeria, for example in the United States or Europe. Where personal data leaves Nigeria, we rely on the transfer rules of the NDPA and the GAID, such as the provider's contractual safeguards and security commitments, and we transfer only what the service needs.
Identity checks for Fund My Film
A filmmaker who applies to run a Fund My Film campaign is asked for:
- their name as it appears on their National Identification Number (NIN) record, their NIN and their date of birth;
- the bank account that will receive donations; and
- if the automatic check does not confirm them, a picture of their NIN slip or card, which NollywoodCV checks by hand.
How the check works. With the filmmaker's consent, the NIN, name and date of birth are sent to our identity verification partner, which compares them with NIMC records and tells us whether they match. Paystack confirms the name on the bank account. A failed automatic match never ends an application on its own: the filmmaker can use the manual check instead, and a person at NollywoodCV makes the final decision.
How it is protected and when it is removed.
- The full NIN, the date of birth and the bank account number are stored encrypted.
- The NIN picture is kept in private storage that cannot be reached from the internet.
- The date of birth is kept only until the check is done.
- The full NIN and the NIN picture are removed when NollywoodCV approves or refuses the application. Only the last 4 digits and a one-way code are kept, so that one NIN cannot be used for two accounts.
- A NIN picture left on an application that was never sent is removed after 30 days.
Pictures of identity documents sent to claim a profile are also kept privately and are deleted 30 days after the claim is decided.
Emails and notifications
Most messages from NollywoodCV appear in the notification bell on the site. We also send these emails to the address on your account:
- Account emails: welcome and email verification, password reset and password changed, Premium started, ending soon, in its grace period and ended, and changes the NollywoodCV team makes to your account at your request.
- Activity emails: when something happens that concerns you, for example when an application is sent, when you are shortlisted or selected, about your listings, ads, events and Fund My Film campaigns, receipts for donations, the result of a profile claim, and notice that an article you wrote was published.
- Newsletters and greetings: NollywoodCV news and What's New announcements, holiday greetings, a birthday greeting if your date of birth is on your profile, and a reminder if you have not signed in for 60 days.
Newsletters and greetings go to members with a verified email address. Every newsletter and greeting has an Unsubscribe link: you can stop newsletters, greetings or reminders separately, or all of them, at any time, and it takes effect straight away. Account and activity emails cannot be switched off, because they are part of the service you use, but we keep them to what concerns you.
We send emails through our email delivery provider. When an email cannot be delivered or is marked as spam, the provider tells us, and we stop sending newsletters and greetings to that address. We do not sell or share your email address for others to send you marketing.
How long we keep data
We keep personal data only as long as it is needed for the purpose it was collected for, or as long as the law requires. Several kinds of data are deleted automatically. For example:
- audition videos and photographs are deleted 20 days after the audition closes, or, for an audition that stays open until the poster closes it, 30 days after they were uploaded;
- Film Market photographs and notes are deleted 7 days after a listing closes;
- accounts that never verify their email address are deleted after 48 hours.
The full schedule is in our Data Retention and Deletion Policy.
How we protect your data
We use technical and organisational measures that fit the risk, including:
- encrypted connections (HTTPS) across the Platform;
- passwords stored only as hashes;
- encryption of NIN, date of birth and bank account numbers;
- private storage for identity pictures and audition files, which are opened only through links that expire after a few minutes;
- checks that payment messages really come from Paystack;
- admin tools available only to NollywoodCV administrator accounts;
- limits on repeated attempts and automatic blocking of spam sign-ups.
No system is completely secure. If a personal data breach is likely to put your rights and freedoms at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and we will tell affected users without undue delay where the risk to them is high, as the NDPA requires.
Please keep your password private and tell us at once if you think someone else has used your account.
Your rights
Under the NDPA you have the right to:
- be informed about how your data is used (this policy);
- access the personal data we hold about you and receive a copy;
- correct data that is wrong or incomplete (most profile details can be changed in your dashboard at any time);
- erasure: ask us to delete your data, subject to what the law requires us to keep;
- restrict how we use your data in certain situations;
- object to uses based on our legitimate interests;
- data portability: receive your data in a common electronic format;
- withdraw consent at any time, where we rely on consent;
- not be subject to a decision based only on automated processing that significantly affects you. No such decision ends anything on NollywoodCV without a person being able to review it.
How to use your rights. Email info@nollywoodcv.com from the email address on your account and say what you want. We may ask you to confirm your identity before acting. We respond as soon as we can and within the time the NDPA and GAID allow.
Deleting your account. There is no delete button in the dashboard at the moment. To delete your account, email us from your account email address. We will delete your account and profile, and keep only what the law or an open payment, dispute or investigation requires.
If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
Children and young people
Under the NDPA, anyone under 18 is a child, and a parent or legal guardian must consent before a child's personal data is processed.
- Young performers aged 13 to 17 may have a profile only with the consent of a parent or guardian, who should create and manage the account and be the contact for it.
- Children under 13 must not use the Platform themselves.
- Paying for anything, posting jobs or listings, running a campaign and making donations are for adults only.
If we learn that a child's data was given to us without a parent's or guardian's consent, we will delete it. Parents and guardians can contact us at any time about a child's profile.
Other websites and services
Profiles, listings, ads and articles can contain links to other websites. Showreels can play from YouTube or Google Drive inside the page: when you play them, YouTube or Google may collect data under their own policies. Payment pages are shown by Paystack under its own privacy policy. We are not responsible for how other websites handle your data.
Changes to this policy
We may update this policy when the Platform, our providers or the law change. The "Last updated" date at the top shows the latest version. When a change significantly affects how we use your data, we will tell members through a notification before it takes effect.
Contact and complaints
Nollywood CV Limited · Email: info@nollywoodcv.com · Phone and WhatsApp: +234 805 053 3253 · Website: nollywoodcv.com
How we handle complaints is explained in our Complaints and Dispute Resolution Policy. You may also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
Questions about this document
Email info@nollywoodcv.com or call or WhatsApp +234 805 053 3253. Please include your account email address and the page you are asking about.