How we handle your information.

1. Who we are

Skill2Create is a global capability development, work-based learning and opportunity ecosystem operated by the Center for Innovation and Entrepreneurship (CIE). CIE is the controller of personal information processed through Skill2Create. You can reach us at privacy@skill2create.org.

2. What we collect

We collect information in three ways:

• Information you give us — name, email address, phone number, location, current stage, availability, pathway interests, motivation statements, links to evidence of your work, and anything you include in forms, applications or messages. Organisations provide organisation details, contact people and opportunity descriptions.
• Information generated through participation — application status, placement records, supervisor and mentor feedback, assessments, milestones and evidence added to your Capability Passport.
• Technical information — the page from which a form was submitted, server logs (IP address, browser type, time of request) kept for security and fraud prevention, and preferences stored in your browser (see Cookies and local storage).

3. How we use it

We use personal information to:

• assess eligibility and respond to registrations, applications and enquiries;
• match participants to opportunities and notify you of new roles you have asked to hear about;
• operate placements — supervision, mentoring, feedback, assessment and progression records;
• verify host organisations and monitor compliance with Skill2Create standards;
• handle concerns, grievances and safeguarding reports;
• keep the platform secure and prevent misuse;
• produce aggregated, anonymised statistics about programme reach and outcomes.

Our legal bases are performance of a contract or steps taken at your request (running the programme), legitimate interests (security, quality assurance, service improvement), consent (opportunity alerts and optional communications) and legal obligation (safeguarding, record-keeping).

4. Who we share it with

• Host organisations — when you apply to an opportunity we share your application with that organisation only, and only what is needed to consider it. During a placement, the host records supervision and assessment information about your work.
• Mentors and assessors — see the evidence and progress records relevant to the participants they support.
• Service providers — hosting, email delivery and analytics providers acting on our instructions under contract. Our website is hosted on Vercel and transactional email is delivered through Resend.
• Ecosystem platforms — with your explicit consent, verified Capability Passport records may be shared with connected platforms (for example to strengthen a career profile). This is always opt-in.
• Authorities — where required by law or to protect someone's safety.

We do not sell personal data and we do not share it with advertisers.

5. Capability Passport

Your Capability Passport is your record of verified competencies, projects, evidence and feedback. You control who it is shared with. Verification entries made by supervisors, mentors and assessors are retained so that the record stays trustworthy; you may add context, dispute an entry through the grievance process, or ask us to close the passport entirely.

6. Cookies and local storage

Skill2Create does not currently use advertising or third-party tracking cookies, which is why you do not see a cookie banner. Your browser's local storage is used for functional preferences only:

• s2c-country — the country you selected in the site header;
• s2c-saved — opportunities you have saved on this device;
• s2c-draft-* — an in-progress application draft, removed when you submit.

This information stays in your browser and is not sent to us until you submit a form. Clearing your browser storage removes it. If we introduce analytics or other non-essential cookies in future, we will ask for consent first and update this notice.

7. Retention

• Enquiries and registrations of interest: up to 24 months after our last contact.
• Applications: 12 months after the opportunity closes, unless you are placed.
• Placement and Capability Passport records: for as long as your passport remains active, and up to 6 years after closure for verification and dispute purposes.
• Grievance and safeguarding records: as required by law and our safeguarding policy.
• Security logs: up to 90 days.

8. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or port your personal information, to object to certain processing, and to withdraw consent at any time. To exercise any right, email privacy@skill2create.org. We respond within 30 days. You may also complain to your local data protection authority — in Nigeria, the Nigeria Data Protection Commission.

9. Security

Information is transmitted over encrypted connections, access is limited to people who need it to run the programme, and host organisations sign confidentiality and data-handling commitments as part of the host standards. No system is perfectly secure; if we become aware of a breach that affects you we will tell you without undue delay.

10. Young participants

Skill2Create opportunities are open to people aged 16 and over. Where a participant is under 18, additional safeguarding measures apply to placements, and we may ask for parental or guardian consent where the law requires it. We do not knowingly collect information from children under 16.

11. Changes and contact

We will post any changes to this notice here and update the date at the top. For questions or requests, contact privacy@skill2create.org or use the contact page.