Privacy NoticePrivacy Notice

This Privacy Notice explains how the office of Hon. Ahmad Abdul'aziz Yari ("the office", "we", "us" or "our") collects, uses, stores, shares and protects personal information when you use this website. It is written to describe what the website actually does. We handle personal information in line with the Nigeria Data Protection Act 2023 and the regulations and guidance issued under it.

1. Who we are

This website is the official website of Hon. Ahmad Abdul'aziz Yari. It is operated by his office, which decides why and how personal information submitted through the website is used. You can reach the office through the contact page.

2. What this notice covers

This notice covers personal information collected through this website: its public pages, its forms and the emails and text messages sent as a result of using them. It does not cover other websites linked from this one, which have their own policies.

3. Information you give us

We only collect personal information that you choose to send us through a form. Each form collects the following.

Contact form

Your name, email address, an optional phone number, the subject and your message.

Email updates ("Stay connected")

Your email address, and optionally your name and phone number. We also record that you agreed to receive updates, and when.

Supporter registration

Your full name and phone number, and optionally your email address, gender, state and local government area. If you registered through a referral link, we record the referral code.

Volunteer registration

Your name and contact details, your location, and the information you choose to give about your skills, interests and availability.

Community requests

A description of the issue you are reporting, its location, and any photographs or documents you attach. You may submit a community request without giving your name. If you do give contact details, we use them only to follow up on that request.

Applications to opportunities

When an opportunity is open, the application form collects your name, phone number, optional email address, state and local government area, your personal statement, your answers to any questions set for that opportunity, and any documents you upload.

Event registrations

When an event accepts registrations, the form collects your name, phone number, optional email address, state, local government area and the number of guests attending.

Please do not include sensitive information, such as health information or religious or political beliefs, in a free-text field unless it is needed for what you are asking us to do.

4. Information collected automatically

Security records

When you submit a form, we record the IP address it was sent from. This helps us detect and block abuse, such as automated or repeated submissions. Forms are also rate-limited for the same reason.

Film views

When a film is played, we count a view. To avoid counting the same person repeatedly, we create a one-way code from the IP address and the film. The code cannot be turned back into the IP address, and it is deleted automatically after six hours.

Analytics

If analytics has been switched on, the website uses Google Analytics and, or, Microsoft Clarity to understand how pages are used. These services collect information such as the pages you visit, how long you stay, the type of device and browser you use, and your approximate location. When analytics is switched off, neither service is loaded. See the Cookie Policy.

Form drafts

Some longer forms save your unsent answers in your own browser so that you do not lose them if the page reloads. This information stays on your device and is not sent to us until you submit the form.

5. How we use your information

We use personal information only for the purpose you gave it to us:

• to read and respond to messages sent through the contact form;
• to send the email updates you asked to receive;
• to register supporters and volunteers and keep in touch with them about the activities they signed up for;
• to receive, review, assign and follow up on community requests;
• to receive and assess applications to open opportunities, and to contact applicants about the outcome;
• to manage attendance at events that accept registrations;
• to send acknowledgements and service messages about a submission, by email or text message;
• to keep the website secure, prevent misuse and fix problems;
• to understand, in aggregate, how the website is used so that it can be improved.

We do not sell personal information. We do not use it for advertising, and we do not make decisions about you by automated means alone.

6. Our lawful bases

We rely on the following lawful bases under the Nigeria Data Protection Act 2023:

• Consent, for email updates, supporter and volunteer registration, and analytics where it is enabled. You can withdraw consent at any time.
• Your request, where you ask us to do something, such as reply to a message, consider an application or look into a community request.
• Legitimate interests, for keeping the website secure and preventing abuse, where those interests are not overridden by your rights.
• Legal obligation, where we are required by law to keep or disclose information.

7. Emails and text messages

When you submit a form, you may receive an acknowledgement by email or text message. Email updates are sent only to people who asked for them. Every update includes a link to unsubscribe, and unsubscribing takes effect immediately. We keep a record of addresses that have unsubscribed so that they are not emailed again.

8. Where your information is stored

Personal information is stored in the website's database and in its cloud file storage. Photographs and documents uploaded with applications, community requests and support records are stored privately. They are never published, and they can only be opened by members of the office who are signed in and whose role allows them to see that kind of record.

9. Who can see your information

Within the office

Access is limited by role. A member of the office can only see the records their role requires.

Service providers

We use trusted service providers to operate the website. They process personal information only on our instructions and for no other purpose:

• a hosting provider that runs the website and its database;
• a cloud storage provider that stores uploaded files;
• email and text message providers that deliver acknowledgements and updates;
• where switched on, Google Analytics and Microsoft Clarity.

Where the law requires it

We will disclose personal information if we are required to by law, by a court order or by a lawful request from a public authority.

We do not otherwise share personal information with anyone.

10. Transfers outside Nigeria

Some of our service providers may store or process information outside Nigeria. Where that happens, we rely on the safeguards permitted by the Nigeria Data Protection Act 2023 to make sure your information remains protected to the standard it requires.

11. How long we keep information

We keep personal information only for as long as it is needed for the purpose it was collected for:

• messages sent through the contact form are kept while the matter is open and for a reasonable period afterwards in case of follow-up;
• email subscriptions are kept until you unsubscribe; the unsubscribe record is kept so that you are not emailed again;
• supporter and volunteer records are kept until you ask to be removed or the record is no longer needed;
• applications are kept for the duration of the opportunity and its follow-up;
• community requests are kept while they are being handled and for a reasonable period after they are closed;
• security records are kept only as long as needed to protect the website;
• film-view codes are deleted after six hours.

When information is no longer needed, it is deleted or reduced to anonymous statistics.

12. How we protect your information

• The website is served over encrypted connections.
• Uploaded documents are stored privately and served only to authorised members of the office.
• Access to the administration area requires an individual account, and supports two-step verification and passkeys.
• Access is limited by role, and significant actions are recorded in an audit log.
• Forms are protected against automated abuse.

No system is completely secure, but we take reasonable technical and organisational steps to protect the information we hold.

13. Children

This website is intended for adults. The forms are not designed for children under 18, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, please contact us and we will delete it.

14. Your rights

Under the Nigeria Data Protection Act 2023, you have the right to:

• be informed about how your information is used;
• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to our use of your information where we rely on legitimate interests;
• receive your information in a commonly used format;
• withdraw your consent at any time, without affecting anything done before you withdrew it.

15. How to exercise your rights

Send your request through the contact page, saying which right you wish to exercise and which form or record it concerns. We may ask you to confirm your identity before acting on the request. We will respond without undue delay and within the time allowed by law.

16. Complaints

If you are unhappy with how we have handled your personal information, please contact us first so that we can try to put it right. You also have the right to complain to the Nigeria Data Protection Commission.

17. Changes to this notice

We will update this notice when the website changes how it handles personal information. The date at the top of this page shows when it was last updated.