Privacy Policy

The Prince Chinedu Uburu (“we,” “us,” or “our”) is committed to protecting the privacy and security of all individuals who interact with our official website and digital services. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable laws of the Federal Republic of Nigeria.

---

1. Information We Collect

We collect information to serve citizens effectively and improve our services. The types of information we may collect include:

1.1 Information You Provide Directly

• Contact Form Submissions: Full name, email address, phone number (optional), subject, and message content when you reach out to us via the contact page.
• Feedback & Complaints: Name, email, phone number, ward, complaint category, description, priority level, and any attached documents submitted through our Citizen Feedback System.
• Newsletter Subscriptions: Email address when you subscribe to receive updates and news from our office.
• Anonymous Submissions: When you choose to submit feedback anonymously, we do not collect your name, email, or phone number.

1.2 Information Collected Automatically

When you visit our website, our servers and third-party services may automatically collect:

• Device Information: Browser type and version, operating system, device type (desktop, mobile, tablet).
• Usage Data: Pages visited, time spent on each page, navigation paths, click patterns, and referring URLs.
• Network Data: IP address, approximate geographic location (at city/region level only), internet service provider.
• Technical Data: Screen resolution, language preference, and time zone settings.

1.3 Cookies and Similar Technologies

Our website uses the following types of cookies:

You may manage your cookie preferences through the cookie consent banner displayed on your first visit, or through your browser settings. Disabling essential cookies may affect the functionality of certain features.

2. How We Use Your Information

We process your personal data based on the following lawful grounds and for the purposes outlined below:

2.1 Service Delivery & Communication

• Responding to your contact form enquiries, complaints, and feedback submissions.
• Providing tracking numbers and status updates for your feedback submissions.
• Sending newsletter updates about government activities, projects, and events (only if you have opted in).
• Notifying you of important public announcements relevant to your area or ward.

2.2 Website Improvement & Security

• Analysing website usage patterns to improve content, design, and user experience.
• Monitoring for security threats, fraudulent activity, and abuse prevention.
• Detecting and preventing spam submissions via honeypot fields and CAPTCHA systems.
• Maintaining server logs and audit trails for security and accountability.

2.3 Legal & Regulatory Compliance

• Complying with applicable Nigerian laws and regulations, including the NDPR.
• Responding to lawful requests from law enforcement or regulatory authorities.
• Establishing, exercising, or defending legal claims where necessary.

3. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information only in the following circumstances:

• Service Providers: Trusted third-party services that help us operate our website (e.g., hosting providers, email services, analytics platforms). These providers are contractually required to protect your data and use it only for the purposes we specify.
• Government Bodies: Other government departments or agencies when necessary to address your complaint, feedback, or enquiry, as required in the course of official duties.
• Legal Requirements: When disclosure is required by law, court order, or governmental regulation.
• Safety & Protection: When we believe disclosure is necessary to protect the rights, property, or safety of the public, our staff, or third parties.

4. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

• Contact Messages: Retained for up to 2 years after resolution, then securely deleted.
• Feedback & Complaints: Retained for the duration required by government record-keeping regulations (minimum 5 years).
• Newsletter Subscriptions: Retained until you unsubscribe. Your email is removed from active lists immediately upon unsubscription.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely. Individual-level data is deleted in accordance with the retention policies of the respective analytics provider.
• Server Logs: Retained for up to 90 days for security and debugging purposes.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS).
• Access Controls: Role-based access controls ensure that only authorised personnel can access personal data, with different permission levels for different staff roles.
• Input Validation: All form submissions are validated and sanitised to prevent malicious input (XSS, SQL injection).
• CAPTCHA Protection: Automated submissions are deterred using Cloudflare Turnstile verification.
• Regular Security Reviews: We periodically review and update our security practices to address emerging threats.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

6. Your Rights Under the NDPR

Under the Nigeria Data Protection Regulation and applicable laws, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to the processing of your data for specific purposes, including direct marketing.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent (e.g., newsletter subscriptions).

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.

7. Third-Party Services

Our website may integrate with the following third-party services, each governed by their own privacy policies:

• Google Analytics: Website traffic analysis — Google Privacy Policy
• Facebook Pixel: Conversion tracking — Meta Privacy Policy
• Cloudflare Turnstile: CAPTCHA protection — Cloudflare Privacy Policy
• Tawk.to: Live chat support — Tawk.to Privacy Policy

We encourage you to review the privacy policies of these services to understand how they handle your data.

8. Children’s Privacy

Our website and services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such information promptly. If you believe a child has submitted personal data to us, please contact us immediately.

9. International Data Transfers

Our website is hosted and operated within infrastructure that may involve data processing outside Nigeria (e.g., cloud hosting, analytics services). Where your data is transferred outside Nigeria, we ensure that appropriate safeguards are in place in compliance with the NDPR, including ensuring that recipients maintain adequate data protection standards.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes:

• The “Last Reviewed” date at the top of this page will be updated.
• A notice may be posted on our homepage for significant changes.
• Newsletter subscribers may be notified of major policy changes.

Your continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

This Privacy Policy is published in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and applies to all users of this official government website.