Privacy notice
Last updated: [date]
This notice explains how Asiwaju's Political Action Committee ("APAC", "we", "us") collects and uses personal data through apac.ng, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA).
Who we are
APAC is the data controller for personal data collected through this website. Contact our data protection officer at privacy@apac.ng or [postal address].
What we collect
- When you volunteer: your name, phone number, whether it is on WhatsApp, email (optional), age range, state, LGA, ward or community (optional), the roles, skills and availability you choose, whether you hold a PVC (optional, yes/no only), how you heard about us, and your consent choices.
- When you send a partnership enquiry or contact us: your name, contact details, organisation (optional) and your message.
- When you browse: anonymous usage statistics (pages visited, device type, approximate country). We use a privacy-friendly analytics service that does not use cookies or track you across other websites.
We do not ask for, and you should not send us, your PVC number, NIN, bank details, religion, ethnicity or health information.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Organising volunteers and contacting you about volunteering | Your consent |
| Sending you news and updates (only if you opt in) | Your consent |
| Replying to enquiries and messages | Your consent, and our legitimate interest in responding |
| Keeping the website secure and preventing abuse | Our legitimate interest |
| Meeting legal obligations | Legal obligation |
You can withdraw consent at any time by writing to privacy@apac.ng or using the unsubscribe link in any message. Withdrawing does not affect what we did before.
Who we share it with
- Our coordinators, limited to volunteers in their own state or LGA.
- Service providers that host the website, store data and send email on our behalf, under written contracts that require them to protect it: [list: e.g. Vercel (hosting), Supabase (database), Resend (email), Sanity (content), Plausible (analytics)].
- Authorities, where the law requires it.
We never sell your personal data.
Transfers outside Nigeria
Some of our service providers store data on servers outside Nigeria. Where that happens we rely on the safeguards the NDPA allows, such as [contractual safeguards / adequacy decisions, to be confirmed by counsel].
How long we keep it
- Volunteer records: until 90 days after the declaration of the 2027 presidential election results, unless you agree to stay in touch, after which we delete or anonymise them.
- Enquiries and messages: 12 months after our last reply.
- Consent records: as long as needed to show we obtained consent.
How we protect it
Data is encrypted in transit and at rest. Access is limited to named staff who need it, protected by strong authentication, and logged.
Your rights
Under the NDPA you can ask us to: tell you what data we hold about you and give you a copy; correct it; delete it; restrict or object to our use of it; and move it to another organisation. Write to privacy@apac.ng. We will reply within [30] days.
If you are unhappy with how we have handled your data, you can complain to the Nigeria Data Protection Commission (NDPC).
Cookies
apac.ng uses only cookies that are strictly necessary for the site to work (for example, security checks on forms). We do not use advertising or tracking cookies.
Changes
We will post any changes to this notice on this page and update the date at the top.