(Nigeria Data Protection Act – NDPA 2023 Compliant)
Overview of Data Protection
General
This Privacy Policy provides an overview of how personal data is collected, used, stored, and protected when you visit or interact with our website. Personal data refers to any information that can identify an individual directly or indirectly.
We are committed to protecting your personal data in accordance with the Nigeria Data Protection Act (NDPA), 2023, and applicable regulations issued by the Nigeria Data Protection Commission (NDPC).
Data Collection on Our Website
Who is responsible for data collection?
Personal data collected on this website is processed by the website operator. The operator’s contact details are provided in the website’s legal notice.
The responsible party is the natural or legal person who determines the purposes and means of processing personal data.
How do we collect your data?
We collect data in two ways:
Data you provide directly, such as when you fill out a contact form, subscribe to a newsletter, or make an enquiry.
Data collected automatically through our IT systems when you visit or use the website, including technical data such as browser type, operating system, IP address, and time of access.
What do we use your data for?
Your data is collected and processed for the following purposes:
To ensure the proper functioning and security of the website
To respond to enquiries and communicate with you
To improve website performance and user experience
To analyse usage patterns for service improvement
To comply with legal and regulatory obligations
Your Rights Under the Nigeria Data Protection Act (NDPA)
Under the NDPA 2023, you have the right to:
Request access to your personal data
Request correction of inaccurate or incomplete data
Request deletion or restriction of processing of your data, where applicable
Withdraw consent at any time (where processing is based on consent)
Object to certain types of data processing
Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
Requests relating to your data rights may be made using the contact details provided in our legal notice.
Consent and Withdrawal
Where we rely on your consent to process personal data, you may withdraw that consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Analytics and Third-Party Tools
When you visit our website, anonymised statistical analyses may be carried out to understand usage patterns. These analyses do not directly identify you and are used solely to improve website performance and services.
You may disable analytics through your browser settings or opt-out mechanisms provided on the website.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, please note that no method of transmission over the internet is completely secure.
Cookies
What are cookies?
Cookies are small text files stored on your device that help improve website functionality, performance, and user experience.
How we use cookies
Session cookies are automatically deleted after your visit.
Persistent cookies remain on your device until deleted and help recognise your browser on future visits.
You may control or disable cookies through your browser settings. Please note that disabling cookies may limit website functionality.
Cookies are used in accordance with the NDPA 2023, based on legitimate interest or user consent, where required.
Server Log Files
Our hosting provider automatically collects and stores information transmitted by your browser, including:
Browser type and version
Operating system
Referrer URL
Hostname
Date and time of access
IP address
These data are used for security, diagnostics, and system optimisation and are not merged with other personal data.
Contact Forms
When you submit a contact form, we collect the information provided to respond to your enquiry and for follow-up communication.
Data submitted via contact forms is processed based on your consent and retained only for as long as necessary to fulfil the purpose or meet legal obligations.
Processing of Customer and Contract Data
We process personal data only where necessary to establish, manage, or terminate contractual or service relationships. Data is retained in line with applicable legal and regulatory retention requirements.
Payments and Encrypted Transactions
Where payment details are required, transactions are processed through secure, encrypted SSL/TLS connections. Payment information is handled only by authorised payment processors and is not stored on our servers.
Information, Correction, and Deletion
You have the right to request access to your personal data, correction of inaccuracies, or deletion of your data where permitted by law. Requests can be made using the contact details provided on the website.
Objection to Unsolicited Communications
The use of contact details published on this website for unsolicited marketing or promotional communications is expressly prohibited.
Analytics – Matomo
This website uses Matomo, an open-source analytics platform. Matomo uses cookies to analyse website usage. IP addresses are anonymised, and collected data is not shared with third parties.
You may opt out of analytics tracking via browser settings or opt-out features provided on the website.
Newsletter
If you subscribe to our newsletter, we collect your email address and confirmation of consent solely for the purpose of sending updates. You may unsubscribe at any time using the unsubscribe link in our communications.
Newsletter data is retained only for as long as the subscription remains active.
Data Protection Officer (DPO)
In accordance with the Nigeria Data Protection Act (NDPA) 2023, Afiyavest Community Health Initiative has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance and serving as the primary contact for data protection matters.
If you have any questions regarding this Privacy Policy, our data processing practices, or wish to exercise your data subject rights, you may contact our Data Protection Officer using the details below:
Data Protection Officer (DPO) Afiyavest Community Health Initiative Email: dpo@afichi.org(or hello@afichi.org if preferred)
The DPO is responsible for:
Monitoring compliance with the NDPA and applicable data protection regulations
Advising on data protection obligations and best practices
Handling data subject requests and complaints
Liaising with the Nigeria Data Protection Commission (NDPC), where required
Regulatory Authority
If you believe your data protection rights have been violated, you may lodge a complaint with the:
Nigeria Data Protection Commission (NDPC) Abuja, Nigeria
