Skip to main content
Retask
Log in Apply

Privacy policy

Version 3 · in force since 25 Sep 2026

Earlier versions are kept, with the dates they applied. Write to privacy@getreliancehealth.com for one.

Retask is the platform Reliance Health uses to raise, perform, check and pay for work. This policy says what personal data Retask holds, why, who can see it, how long it is kept, and what you can do about it. It applies the same way in Nigeria, Egypt and Senegal.

Reliance HMO (a subsidiary of Reliance Health) is the controller of the personal data in Retask. It decides why and how the data is used. Retask is Reliance Health's own internal platform for processing it. It is not a separate company, and it does not use your data for anything of its own.

Every person and company whose data appears in Retask already has a data protection agreement with Reliance HMO. That includes health-plan members and client companies. Everyone who works on the data works under a contract with confidentiality terms, and can reach only what their role needs:

  • freelancers;
  • printing and delivery vendors;
  • staff.

Questions go to privacy@getreliancehealth.com.

Your details reach Retask because you, or your employer, enrolled you on a Reliance HMO health plan. That happens under your existing agreement with Reliance HMO. The same applies to anyone you enrolled with you.

  • What Retask holds: the details on your enrolment form. That's your name, date of birth, gender, marital status, contact details, address, HMO ID, plan and your photograph, and the same details for your dependants. It also holds the form itself.
  • Why: to enter your enrolment into Reliance HMO's records accurately, and to produce your health ID card.

  • Who sees it: only the people doing that work, and only for the task in front of them:

    • the freelancer entering your form;
    • the person checking it;
    • the card printer.

    Each of them is bound by confidentiality. Nobody in Retask can browse members.

  • How long: the form, the scans, and your details held in the work are removed 90 days after the work is paid for, and never while a correction or dispute about it is open. A record that the work was done stays, without your personal details. Two facts stay with it: the type of plan and the date the policy ends. They are kept without your name, HMO ID, contact details or anything else that identifies you, so that the work can still be counted and checked.
  • Your rights: exercise them with Reliance HMO, the controller, through the contact above.

  • What we collect when you apply:

    • your name, email, phone, date of birth, country, city and availability;
    • your aptitude test answers and score.

    We use your date of birth only to confirm you are 18 or over.

  • Why: to assess your application, route work to the right country, and contact you about it. We do this with your consent, which you give when you apply. You can withdraw it by writing to us, and that ends your application.
  • Identity documents and bank details: we ask for these only if you are offered a contract, never at the application stage.
  • How long: if you are not contracted, your application details are anonymised 365 days after your last contact with us. An account whose email address you never confirmed is deleted after 7 days.
  • What we hold, in addition to your application:
    • your address, tax ID and emergency contact;
    • your bank details;
    • the documents we ask you for (such as a government ID or proof of address);
    • your contract, and the records of your work, reviews, earnings and invoices.
  • Why: to contract and onboard you, give you work, check its quality, and prepare your invoices. This is done under your vendor contract with Reliance.
  • Bank details:
    • they are encrypted and never shown on any screen, to anyone;
    • they appear only in your final contract and your invoices, which are the documents that need them;
    • your final contract is emailed to you, and the email includes them;
    • Retask never makes a payment itself.
  • How long:
    • identity documents are removed 90 days after you stop working with us, and your account is anonymised at that point;
    • contract documents are kept 7 years after they are countersigned;
    • the approval and payment documents for each invoice are kept 10 years after it is paid, to meet tax and accounting law, then removed;
    • the records of your work, reviews, earnings and invoices stay with the work, and stop identifying you once your account is anonymised.

These periods, the ones above for applicants, and the notification period below are settings in Retask. If one changes, this policy changes with it.

We hold your name, work email and sign-in identity, so that you can use Retask for your role. You sign in with your Reliance account.

  • How long: for as long as you have access. Your account is anonymised 90 days after your access ends. The record of what you did in Retask stays with the work, and stops identifying you at that point.
  • Signing in. For your security, we keep a record of every attempt to sign in to your account: when it happened, whether it succeeded, the IP address, the browser and device it came from, and the approximate place (the city and country). Retask works that place out from the IP address itself, using a copy of an IP location database kept inside Retask, so your IP address is never sent to anyone to do it. If someone tries to sign in with an email address that has no account, we keep the address they typed with that attempt. We keep these records for 180 days, then delete them. You can see your own recent sign-ins under Settings → Security, and Admins can see them when looking into a problem with an account.
  • Devices you have used before. Retask remembers the devices you sign in from, using a cookie that holds a random identifier and nothing about you. A sign-in from a device it has not seen before is marked as new. We email you about it and show you a notice, so that you can act if it wasn't you.
  • One place at a time. Signing in ends your session on any other device. The device that was signed out is told why.
  • Notifications. We keep a record of each email and notification Retask sends you: the address, the subject and when it was sent. We keep it for 1 year, then delete it. An alert sent to a team keeps its list of addresses for 1 year too, then the list is cleared.
  • What you agreed to. When you accept this policy or the terms of use, we record which version you accepted and when. We keep that for as long as your account exists. Once your account is anonymised, it no longer identifies you.
  • What you write about the work. A message in an issue, a payment complaint, a defect report or a challenge to a review is kept with the work it is about, for as long as that record is kept. Once your account is anonymised, it no longer shows that you wrote it, but the words stay as written, so please leave personal details out of them.
  • We keep your time zone, detected from your browser or chosen in your settings, so times are shown in yours.
  • You can add a profile photo in your settings. It is optional, and you can remove it there.
  • The audit log records who did what and when. It is kept permanently, because it is how every decision can be checked later.
  • We use only the cookies Retask needs to keep you signed in and to show times in your time zone. There is no advertising, no analytics and no tracking. The cookie notice lists each one.

Only these services, and only for the job named:

  • Zoho Sign: signing vendor contracts.
  • Zoho and Microsoft: signing in.
  • Resend: sending Retask's emails.
  • Amazon Web Services (AWS): hosting.

We do not sell personal data or share it for advertising. Where these services store data outside your country, that happens under the same agreements with Reliance HMO.

  • Access is limited by role and country, and checked on every request.
  • Bank details and tax IDs are encrypted.
  • Passwords are stored only as secure hashes.
  • Connections are encrypted.
  • Administrative access needs a second factor.
  • Every significant action is recorded in the audit log.
  • A sign-in from a device Retask hasn't seen before is flagged, and you are told about it.

You can ask to see, correct or delete your personal data, object to its use, or withdraw your consent where consent is the basis. Write to privacy@getreliancehealth.com. You can also complain to your country's data protection authority.

This policy applies identically in each country Retask serves, under that country's data protection law:

  • Nigeria: the Nigeria Data Protection Act 2023. The regulator is the Nigeria Data Protection Commission.
  • Egypt: Personal Data Protection Law No. 151 of 2020 and its Executive Regulations (Prime Ministerial Decree No. 816 of 2025). The regulator is the Personal Data Protection Centre.
  • Senegal: Law No. 2008-12 of 25 January 2008 on the protection of personal data. The regulator is the Commission de Protection des Données Personnelles.

Each version of this policy is kept, and the date of each change is shown. If a change affects what you have agreed to, we will ask you again.