Allô Taf · Legal
How Allô Taf collects, uses, shares, protects and deletes personal data.
Effective date: 28-07-2026 · Version 1.0 · Last updated: 28-07-2026
Allô Taf is a job-matching and professional networking platform operating primarily in Douala and elsewhere in the Republic of Cameroon. Our purpose is to replace closed, word-of-mouth recruitment networks with an open, verified and skills-based system — in short, to digitalise trust rather than favouritism. Doing that credibly requires us to handle personal data carefully, and to be honest about how we handle it.
This Privacy Policy explains what personal data we collect, why we collect it, on what legal basis, who we share it with, how long we keep it, how we protect it, and what rights you have over it.
For the purposes of data protection law, the controller of the personal data described in this policy — that is, the entity that determines why and how your data is processed — is:
Identity of the controller Legal entity [LEGAL ENTITY NAME] Trading name Allô Taf Legal form [LEGAL FORM, e.g. SARL] Trade register (RCCM) [RCCM NUMBER] Taxpayer number [NIU / TAXPAYER NUMBER] Registered office [STREET ADDRESS], Douala, Republic of Cameroon Website https://allotaf.com Identity of the controller General contact [CONTACT EMAIL] Privacy contact [PRIVACY EMAIL, e.g. privacy@allotaf.com] Data protection officer [NAME AND CONTACT OF THE DPO, IF APPOINTED] Telephone [TELEPHONE NUMBER, INTERNATIONAL FORMAT] Where this policy says we, us, our or Allô Taf, it refers to the entity identified above.
Term Meaning in this policy Personal data Any information relating to an identified or identifiable natural person, such as a name, telephone number, email address, photograph, curriculum vitae, device identifier or location data.
Processing Any operation performed on personal data: collection, recording, storage, consultation, use, disclosure, restriction, erasure or destruction.
Controller The person or entity that determines the purposes and means of processing. For the platform, this is Allô Taf.
Processor A third party that processes personal data on our instructions and on our behalf, such as our hosting and infrastructure providers.
Data subject The identified or identifiable natural person to whom personal data relates — in most cases, you.
Job Seeker A natural person who registers on the platform in order to find employment or professional opportunities. Also referred to as a Candidate.
Employer A company, institution, association or individual employer that registers on the platform in order to publish opportunities or search for candidates. Also referred to as an Enterprise.
Founding Enterprise An Employer that joins the platform during the launch programme under the Entreprises Fondatrices offer.
Ambassador A natural person accredited by Allô Taf under the ambassador programme to introduce Job Seekers and Employers to the platform in the field.
Platform The website, the mobile application and all associated services operated by Allô Taf.
The Law Law No. 2024/017 of 23 December 2024 relating to personal data protection in Cameroon, together with its implementing texts and any other applicable Cameroonian legislation.
The Authority The Personal Data Protection Authority established under the Law.
The table below is a short summary intended to make this policy easier to use. It does not replace the detailed sections that follow.
Category Examples Who is concerned Do we require it?
Identity First name, surname, gender, date of birth, profile photograph Job Seekers, Ambassadors, Employer contacts Yes, in part Contact Telephone number, WhatsApp number, email address, quarter, town, region All users Yes Professional Curriculum vitae, work experience, qualifications, skills, trade or sector, availability, expected salary range Job Seekers Optional but recommended Company Company name, sector, size, address, trade register number, contact person, chosen pack Employers Yes Programme Ambassador code, recruitment counts, validation status, bonus tier, payment reference Ambassadors Yes Activity Applications sent, offers viewed, messages exchanged on the platform, verification status All users Generated by use Technical Device model, operating system version, application version, language, IP address, application identifiers, crash reports All users Collected automatically Financial Payment reference, transaction identifier, amount, date, mobile money or bank reference Employers, Ambassadors Only where a payment occurs WE DO NOT COLLECT SENSITIVE DATA Allô Taf does not ask for, and does not want, data revealing your ethnic or regional origin, your religious, philosophical, political or trade-union opinions, your health, your genetic or biometric data, or your sex life. Section 9 explains what this means in practice, including for curricula vitae.
When you use the website or the application, certain data is generated automatically by your browser or device and by the technical services we use:
We do not collect precise GPS location in the background, we do not read your contacts, your call logs, your SMS messages or the content of your other applications, and we do not access files on your device outside those you explicitly select in order to upload them.
If you register as a Job Seeker, we process the following categories of data.
Data Detail Status Identity First name and surname, gender, date of birth or age bracket, profile photograph if you choose to upload one Required, except the photograph Contact Telephone or WhatsApp number, email address, quarter, town and region of residence Telephone required Account Password (stored only in irreversible hashed form), account status, date of creation, verification status Required Professional profile Curriculum vitae, summary or professional headline, trade or sector, work experience, employers previously worked for, qualifications and certificates, languages, skills, driving licence category Optional but strongly recommended Search preferences Type of contract sought, desired sector, geographical area, availability, expected salary range, mobility Optional Applications Opportunities viewed, applications sent, cover messages, status of each application, date and outcome Generated by use Verification Documents or references you submit so that a skill, a qualification or an identity can be verified, and the outcome of that verification Optional Communications Messages exchanged with Employers through the platform and with our support team Generated by use Introduction The code of the Ambassador who introduced you, if any Where applicable ABOUT YOUR CURRICULUM VITAE A curriculum vitae is a free-form document. You control what it contains. Please do not include your religion, your ethnic group or region of origin, your political or trade-union affiliation, your health status, your marital situation, the number of your children, or your national identity card number. None of this is required to obtain a job through Allô Taf, much of it is legally sensitive, and all of it increases the risk of discrimination — which is precisely what this platform exists to reduce.
Where we detect such information in a document you have uploaded, we may ask you to replace the document, or remove the document from your profile.
If you register an organisation on the platform, whether as a Founding Enterprise or otherwise, we process the following.
Data Detail Status Company identity Company or business name, legal form, sector of activity, approximate size or number of employees, year of creation, logo Required, except the logo Registration data Trade register number (RCCM), taxpayer number, or any other business identifier, where the organisation is formally registered Optional at sign-up, required for verified status Establishment Physical address, quarter, town, region, and any additional sites Required Contact person Name, role, telephone or WhatsApp number, and email address of the person representing the organisation on the platform Required Account Login credentials, password in irreversible hashed form, roles and permissions of each user of the account Required Commercial Pack selected, subscription start and renewal dates, invoices issued, payment references, payment status Where a paid pack is taken Data Detail Status Publication Job offers published, their content, their status, the number of applications received and the outcome recorded Generated by use Recruitment Candidate profiles consulted, shortlists, notes recorded against a candidate, messages sent Generated by use Verification Documents provided so that the organisation can be verified, and the outcome of that verification Optional Introduction The code of the Ambassador who introduced the organisation, if any Where applicable Data relating to a company as such — its name, sector or address — is not personal data. Data relating to the individuals who represent that company is personal data, and is protected by this policy. Employers who consult candidate profiles process personal data in their own right and carry their own obligations under Part II, clause 7.
Ambassadors are accredited members of the Allô Taf field network. If you are accredited as an Ambassador, we process the following.
Data Detail Status Identity First name and surname, gender, date of birth, photograph used on the ambassador card Required Contact Telephone or WhatsApp number, email address, quarter, town and region of activity Required Accreditation Ambassador code, date of accreditation, validation status, assigned geographical zone, personalised welcome page and QR codes Required Performance Number of Job Seekers and Enterprises introduced, number validated, number pending verification, and the resulting bonus tier Generated by activity Payment Mobile money number or bank details used to pay a bonus, transaction references, amounts and dates of payment, and any supporting document required for accounting purposes Where a bonus is paid Communications Messages exchanged with the coordination team, including on messaging groups operated by Allô Taf Generated by use
Withdrawal does not affect the lawfulness of publication before withdrawal, and we cannot recall materials already printed or already distributed by third parties, but we will stop future use and remove the material from channels we control.
We publish periodic community updates showing the total number of validated Ambassadors, new recruits and pending verifications. These figures are aggregated and do not identify individuals, unless you have separately consented to being named.
Cameroonian law prohibits, or subjects to prior authorisation, the processing of certain categories of especially sensitive personal data. Allô Taf has taken the deliberate decision not to collect them at all. We do not ask for, and you should not send us:
No employer using Allô Taf is entitled to require any of the above as a condition of applying for a position published on the platform. If an employer asks you for it, please report the offer to us using the reporting function or the contact details in section 26. Where we identify such data in a profile, a document or an offer, we may remove it without prior notice, and repeated attempts to introduce it may lead to suspension of the account concerned.
A photograph, a date of birth and a gender are processed for the ordinary purposes of identifying you and of operating an employment platform. Where you consider that supplying a photograph is not appropriate, you may leave it out; your profile will remain usable.
We process personal data only where we have a legal basis for doing so. Under Cameroonian law, your consent is the principal basis on which we rely; other bases apply where the law or a contract requires it.
Legal basis When we rely on it Consent Creation of an account and of a profile; publication of your profile to Employers; use of your name and image in communication materials; sending of push notifications and commercial messages; use of non-essential cookies and audience measurement. Consent is given by a clear affirmative act and may be withdrawn at any time.
Performance of a contract Provision of the services you have subscribed to, management of your account, processing of applications, delivery and invoicing of Founding Enterprise packs, calculation and payment of ambassador bonuses.
Legal obligation Retention of accounting and tax records, response to a lawful request from a judicial or administrative authority, notification of a data breach, and compliance with obligations under the Law.
Legitimate interest Security of the platform, prevention and detection of fraud and of fraudulent registrations, technical diagnostics, and defence of legal claims — in each case balanced against your rights and freedoms.
Where processing is based on consent, refusing or withdrawing consent will not disadvantage you beyond the natural consequence that the corresponding feature cannot function. For example, if you do not consent to your profile being visible to Employers, we can maintain your account but we cannot propose you for opportunities.
We use personal data for the purposes set out below and for no other purpose that is incompatible with them. Retention periods are summarised here and set out in full in Annex C.
Purpose Main data used Basis Retention Create and manage your account Identity, contact, credentials Contract, consent Life of the account Build and display your profile Identity, professional profile, photograph Consent Life of the account Match candidates with opportunities Profile, preferences, sector, location Consent, contract Life of the account Process and follow applications Profile, application data, messages Contract Life of the account, then 12 months Verify identity, skills and employers Identity, documents supplied, verification outcome Consent, legitimate interest Duration of the verification, then outcome only Operate the ambassador programme Accreditation, performance, payment references Contract Life of the accreditation Sell, deliver and invoice enterprise packs Company data, contact person, payment references Contract, legal obligation 10 years for accounting records Send service messages and notifications Contact, push token, preferences Contract, consent Until you object or withdraw Provide user support Contact, account, correspondence Contract 3 years from last contact Secure the platform and prevent fraud Technical data, connection logs, activity Legitimate interest, legal obligation 12 months Diagnose defects and improve the service Crash reports, technical data, aggregated statistics Consent, legitimate interest Up to 14 months Measure audience and usage Pseudonymous usage events Consent Up to 14 months Meet legal and regulatory obligations As required by the relevant text Legal obligation As prescribed by law Purpose Main data used Basis Retention Establish, exercise or defend legal claims As strictly necessary Legitimate interest Until the claim is time-barred
The Allô Taf application and parts of our back office are built on Google Firebase, a suite of development and hosting services provided by Google LLC and its affiliates. Firebase acts as our processor: it handles data on our instructions, for our purposes, under a data processing agreement. The table below explains exactly which Firebase components we use and what each one does with your data.
Service What it does for Allô Taf Data involved Firebase Authentication Creates and secures your account, verifies your telephone number or email address, manages sign-in, and issues session tokens.
User identifier, email address, telephone number, hashed password, sign-in timestamps, verification status Cloud Firestore Stores the working data of the platform: profiles, job offers, applications, ambassador records, messages and configuration.
Profile data, professional data, company data, application and messaging data, ambassador data Cloud Storage for Firebase Stores files you upload, such as a profile photograph, a company logo or a curriculum vitae.
Uploaded documents and images, and their metadata Firebase Cloud Messaging Delivers push notifications to your device. Push notification token, device and application identifiers, delivery status Google Analytics for Firebase Measures how the application is used in aggregate, so that we can improve navigation and content.
Pseudonymous application instance identifier, screens viewed, events triggered, device model, OS version, language, approximate location derived from IP Firebase Crashlytics Reports crashes and errors so that defects can be reproduced and corrected.
Crash traces, application state at the time of the crash, device model, OS version, an installation identifier Firebase App Check / security rules Protects the back end against abuse and unauthorised access.
Application attestation tokens, technical request data Google Play services Provides the technical foundation for the application on Android devices, including delivery, updates and integrity checks.
Device and Play account technical data processed by Google
Allô Taf does not use Firebase or Google Analytics data for advertising, does not integrate an advertising network in the application, does not collect an advertising identifier, and does not sell, rent or trade personal data with advertisers or data brokers.
The website allotaf.com uses cookies and similar technologies. A cookie is a small file placed on your device that allows a site to recognise your browser and to remember information between visits.
Category Purpose Consent required Typical lifetime Strictly necessary Session management, login, form security, load balancing, recording your cookie choices No Session to 12 months Functional Language selection, display preferences, remembering information entered in a form Yes Up to 12 months Audience measurement Counting visits, understanding which pages are consulted, measuring the performance of the site Yes Up to 13 months Social media and embedded content Playing embedded videos, displaying social feeds, sharing buttons Yes Set by the third party
The website is built on WordPress and may load resources from third parties, including web fonts, embedded maps, embedded videos and social network widgets. Where such a resource is loaded, the third party may receive your IP address and technical data about your browser. These resources are blocked until you consent to the corresponding cookie category. The complete and current list of cookies actually placed is published on the cookie settings page and is updated whenever the site changes.
With your permission, the application sends push notifications to inform you of matters that are useful to you: a new opportunity matching your profile, a response to an application, a message received, a verification result, an important change to the service, or a security alert.
To deliver notifications we store a push token associated with your installation. The token is deleted when you uninstall the application, disable notifications or delete your account.
We do not sell your personal data. We do not rent it, and we do not trade it with advertisers or data brokers. We share it only in the circumstances described below.
Recipient What is shared Why Your control Employers on the platform Your profile as you have configured it, your applications and the messages you send So that you can be considered for opportunities You control the visibility of your profile and choose which offers to apply to Job Seekers The public profile of the Employer and the content of its offers So that you can assess an opportunity Employers control their published content Ambassadors Confirmation that an introduction has been validated, and the name of the person or organisation introduced To calculate the bonus due Ambassadors do not obtain access to profiles, applications or messages Technical service providers Only the data needed for the service concerned Hosting, database, messaging, analytics, crash reporting, email and SMS delivery Governed by a written data processing agreement — see Annex B Payment providers Payment reference, amount, and the identifiers required to execute the transaction To collect a pack payment or to pay an ambassador bonus We do not store full card details Professional advisers Only what is strictly necessary Accounting, audit, tax and legal advice Bound by professional secrecy Public authorities What is required by the request Where we are legally required to respond to a court, a regulator or a law enforcement authority acting within its powers We verify the legality of each request and disclose only what is required Acquirer or successor Data necessary to continue operating the platform In the event of a merger, a restructuring or a transfer of the business You will be informed and this policy will continue to apply until it is lawfully replaced Where we publish aggregated or anonymised statistics — for example the number of candidates registered in a sector, or the number of validated Ambassadors — that information no longer identifies you and is not personal data.
We implement technical and organisational measures appropriate to the risk. The principal measures are:
No system is perfectly secure. You also play a part: choose a password you use nowhere else, never share your credentials, do not send copies of your identity documents to anyone who contacts you claiming to represent Allô Taf, and tell us immediately at [PRIVACY EMAIL] if you suspect that your account has been compromised.
If a personal data breach occurs, we will:
Our processors are contractually obliged to inform us of any breach affecting Allô Taf data without undue delay.
We keep personal data only for as long as is necessary for the purpose for which it was collected, and then delete it or render it anonymous. The full retention schedule is set out in Annex C. The principal periods are:
Data Retention period Starting point Active account and profile For as long as the account remains active — Inactive account 24 months of complete inactivity, after which we give notice and then delete or anonymise the account Last connection Applications and related messages 12 months Closure of the application Curricula vitae and uploaded documents Deleted with the account, or earlier at your request Deletion request Ambassador records Duration of the accreditation, then 12 months End of accreditation Accounting and invoicing records 10 years, as required by commercial and tax law End of the financial year Technical and security logs 12 months Date of the event Analytics and crash data Up to 14 months Date of collection Consent and preference records 5 years after the consent ends, as evidence that consent was validly obtained Withdrawal of consent Support correspondence 3 years Last contact Where the Authority prescribes maximum retention periods in an implementing text, and those periods are shorter than the ones above, the shorter periods will apply and this policy will be updated.
Allô Taf is operated from Cameroon and serves users in Cameroon. However, some of the technical services we rely on — in particular Google Firebase — store and process data on infrastructure located outside Cameroon, in [FIREBASE DATA REGION, e.g. europe-west1]. This constitutes an international transfer of personal data.
In respect of those transfers we:
STATUS OF THE AUTHORISATION FOR INTERNATIONAL TRANSFERS Under Law No. 2024/017, cross-border transfers of personal data are subject to the prior authorisation of the Personal Data Protection Authority. The practical procedure for obtaining that authorisation depends on implementing texts and on the effective installation of the Authority. Allô Taf monitors the position and will complete the required formalities as soon as the procedure is open. The current status of this file is: [TRANSFER AUTHORISATION STATUS].
This paragraph should be updated — not deleted — once the authorisation has been requested or granted.
You have the following rights in relation to your personal data. They are exercised free of charge, except where a request is manifestly unfounded or excessive.
Right What it allows you to do Information Be told, in clear terms, what data we hold, why, for how long and with whom it is shared — which is the purpose of this policy.
Access Obtain confirmation that we process your data and receive a copy of it.
Rectification Have inaccurate data corrected and incomplete data completed. Most profile data can be corrected directly in your account.
Erasure Ask us to delete your data where it is no longer necessary, where you withdraw the consent on which processing was based, or where processing is unlawful. See Part III for account deletion.
Restriction Ask us to suspend the use of your data while a dispute about its accuracy or lawfulness is examined.
Objection Object to processing based on our legitimate interest, and object at any time and without justification to receiving commercial messages.
Portability Receive the data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another provider where technically feasible.
Withdrawal of consent Withdraw consent at any time, as easily as it was given, without affecting the lawfulness of processing carried out before the withdrawal.
Human review Not be subject to a decision producing legal effects taken solely by automated means, and to obtain human intervention — see section 21.
Post-mortem instructions Give directions on what should happen to your data after your death. In the absence of instructions, your beneficiaries may exercise the rights provided by the Law.
Complaint Lodge a complaint with the Personal Data Protection Authority, or bring proceedings before the competent Cameroonian courts.
To protect you, we must be satisfied that a request comes from you. We will verify your identity by reference to information already in your account, and we will ask for a proof of identity only where a doubt genuinely remains. We acknowledge requests within [X] working days and respond within [Y] days of receiving a complete request, or within any shorter period prescribed by the Authority. If we need more time because a request is complex, we will tell you why and give you a date. If we refuse a request, we will explain our reasons and tell you how to challenge the decision.
Allô Taf uses automated processing to propose opportunities to candidates and candidates to employers. The matching is based on objective criteria that you have supplied or that are recorded in an offer: trade or sector, qualifications, experience, languages, availability, geographical area and type of contract sought.
Where an account is suspended automatically because of a detected security or fraud signal, the suspension is reviewed by a member of our team, and you may ask for that review at any time.
Allô Taf is intended for adults. You must be at least 18 years old to create an account, whether as a Job Seeker, an Employer representative or an Ambassador. We do not knowingly collect personal data from persons under 18.
If we learn that an account has been created by a person under 18, we will suspend the account, cease processing the data, and delete it within a reasonable period unless the law requires us to retain it. A parent or legal guardian who believes that a minor has provided us with personal data may contact us at [PRIVACY EMAIL], and we will act on the request promptly.
Nothing in this policy affects the protective provisions of Cameroonian labour law concerning the employment of young persons, which employers remain bound to respect independently of the platform.
Everyone who has access to personal data on behalf of Allô Taf — employees, interns, contractors, Ambassadors and members of the coordination team — is bound by a written confidentiality undertaking, is trained on the handling of candidate data, and has access limited strictly to what their role requires. Ambassadors, in particular, do not have access to candidate profiles, applications, curricula vitae or messages. Their role is to introduce people to the platform, not to handle their files.
The platform may contain links to websites, application forms or social media pages operated by third parties, including employers. Following such a link takes you outside Allô Taf. We do not control those sites, we are not responsible for their content or their privacy practices, and this policy does not apply to them. We encourage you to read the privacy policy of any site before providing it with personal data.
We may update this policy to reflect changes to the platform, to our processors, or to the applicable law. When we do:
For any question, request or complaint concerning your personal data, or to exercise the rights described in section 20, please contact us.
Channel Details Privacy and data protection contact@allotaf.com Data protection officer [DPO NAME AND EMAIL, IF APPOINTED] General enquiries and support contact@allotaf.com Telephone / WhatsApp [TELEPHONE NUMBER] Postal address [LEGAL ENTITY NAME], [STREET ADDRESS], Douala, Republic of Cameroon Website https://allotaf.com We aim to resolve every request directly and quickly. If you are not satisfied with our response, you are entitled to lodge a complaint with the Personal Data Protection Authority of Cameroon established under Law No. 2024/017, and to bring proceedings before the competent Cameroonian courts. Details of the Authority’s contact arrangements will be added here as soon as they are officially published: [AUTHORITY CONTACT DETAILS].
