Privacy policy
This policy is written for a privacy-first public-interest website. It should be reviewed by legal counsel before the site handles significant personal data at scale.
Effective date: 5 May 2026
The People's Ledger is designed to provide voter information, transparency guidance, and volunteer coordination in a way that respects visitor privacy. This page explains what information may be collected, why, how it is protected, and what rights users may exercise.
1. What we collect
On a public browse-only visit, the website is designed to function without third-party trackers. If you submit a volunteer form, we collect the personal information you provide: name, email address, phone number, state, role preference, and any message you include. We do not collect data beyond what you directly submit.
2. Why we collect it
Information is collected only for clear civic-service purposes: responding to enquiries, coordinating volunteers, improving accessibility, and maintaining security. We do not collect data for advertising, profiling, or commercial purposes.
3. Lawful and responsible use
Where personal data is processed, it is done under an appropriate lawful basis — principally consent (where you submit a form) and legitimate interest (where necessary for the civic mission of the platform). We keep records of our basis for processing and review whether collection remains proportionate.
4. Cookies and tracking
This website does not include advertising pixels, third-party analytics tags, session replay tools, or behavioural profiling scripts. The only browser storage used is localStorage to remember your language preference. If analytics are introduced in future, they will be disclosed clearly in this policy and minimised by default.
5. Storage and retention
Personal data submitted through forms is stored securely on our server infrastructure, protected in transit using HTTPS, and retained only for as long as genuinely needed for volunteer coordination purposes. Volunteer data will be deleted or anonymised after the 2027 election cycle, unless you explicitly consent to a longer relationship.
6. Sharing
Personal data is not sold. It is shared only with authorised personnel working on the platform, trusted service providers who process it under equivalent safeguards, or legal authorities where required by Nigerian law.
7. Your rights
You may request access to your personal data, correction of inaccurate information, deletion where appropriate, or information about how your data is used. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe consistent with applicable law.
8. Security
We use reasonable technical and organisational measures including encrypted transport (HTTPS/TLS), least-privilege access controls, regular backups, and careful vendor selection. No system is completely impenetrable, but we take security seriously as a public-interest obligation.
9. Children
This site is intended for adult voters and civic participants. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted data through our forms, please contact us so we can remove it promptly.
10. International transfers
Our server infrastructure is hosted in Europe (Hetzner, Nuremberg). Data transferred outside Nigeria is handled under appropriate contractual and technical safeguards. We assess vendor commitments and applicable compliance requirements on an ongoing basis.
11. Regulatory context
This policy is written with reference to Nigerian data protection requirements and guidance from the Nigeria Data Protection Commission (NDPC). We are committed to staying aligned with evolving Nigerian data protection law.
12. Contact
For privacy enquiries, write to us at [email protected]. A Data Protection Officer or privacy lead will be named on this page as the organisation grows.
13. Changes to this policy
We may update this policy from time to time. Material changes will be dated clearly at the top of this page and communicated to active volunteers by email where appropriate.
This website is privacy-first by default. Once form submissions connect to backend storage and email delivery systems, this policy will be reviewed line by line before any data is retained at scale.