Pre-launch draft · Prepared for review. Operator details and operational arrangements must be confirmed before adoption.
Scope
This notice concerns the GovCMS marketing website. It does not govern personal information published or processed by an institution using its own GovCMS deployment. The institution’s privacy notice and its service agreement apply to that processing.
Nigerian data protection framework
This notice is prepared with reference to the Nigeria Data Protection Act, 2023 (the NDP Act), the Nigeria Data Protection Regulation, 2019 (NDPR) to the extent it remains applicable, and the privacy right recognised by section 37 of the Constitution of the Federal Republic of Nigeria. It describes the intended handling of information on this pre-launch website. It is not a claim of certification, registration, accreditation or completed compliance audit.
Information you provide
An enquiry requests your name, work email, organisation, optional role, area of interest and website requirements. Please do not submit passwords, identity documents, classified information or sensitive personal data. When the form is in preparation mode, its contents remain in your browser and are not transmitted. Copying a prepared enquiry places the text on your device’s clipboard.
How an enquiry is used
When online delivery is enabled, the details you choose to submit are sent to the configured enquiry service to respond to your request, understand the proposed project and arrange any follow-up you request. The form asks for your permission to use these details for that purpose. It does not enrol you in a marketing mailing list.
Processing principles and lawful basis
We intend to process personal data fairly, lawfully and transparently; collect only what is relevant to the stated purpose; keep it accurate; limit retention; and protect its confidentiality, integrity and availability. The enquiry form is intended to rely on your consent for the stated response, with any other lawful basis—such as steps requested before a contract, a legal obligation or a legitimate interest—documented for the relevant processing before launch. You may withdraw consent, but withdrawal does not affect processing already carried out lawfully.
Browsing and cookies
This implementation does not add advertising trackers, analytics scripts or non-essential cookies. Hosting and network providers may process technical connection information, such as IP addresses and request logs, to deliver and protect the website. Their processing and retention arrangements must be documented for the production environment.
Service providers and retention
The production notice must identify the website operator, enquiry service providers, processing locations, applicable transfer safeguards and the retention period for enquiries and server logs. These operational details have not yet been confirmed. No fixed retention period or data residency guarantee is made in this draft.
Your data-subject rights
Subject to the NDP Act and other applicable law, you may ask to be informed about processing, access your personal data, correct inaccurate data, object to or restrict processing, request erasure, request data portability, withdraw consent, and ask for human review where a decision is based solely on automated processing. You may also lodge a complaint with the Nigeria Data Protection Commission. A verified privacy contact, identity-verification method and response process must be published before online enquiries are opened.
Security and personal-data incidents
Appropriate technical and organisational safeguards must be applied to protect personal data against unauthorised access, unlawful processing, loss, destruction or damage. The production incident-response process, including any required notice to the Commission or affected data subjects, must be confirmed before launch. Do not send confidential, classified or sensitive personal data through this form.
International transfers and automated decisions
The production notice must identify any transfer of personal data outside Nigeria and the lawful mechanism and safeguards used for that transfer. This website does not intentionally make decisions about people solely through automated processing. Any future profiling or automated decision feature would require a separate assessment and notice.
Before publication
This is a pre-launch draft. The legal operator’s identity, address, privacy contact, processing grounds, providers, retention arrangements and effective date require confirmation before this notice is adopted.
Prepared with reference to the Nigeria Data Protection Act, 2023 (NDP Act). Read more about privacy rights in the NDPC privacy policy or download the Nigeria Data Protection Act, 2023.