Privacy Notice

Version 1.0, 13 November 2026. This notice explains what personal data NoRigging collects, why, who sees it, how long it is kept and what your rights are. It is written to meet the Nigeria Data Protection Act 2023 (NDPA) and the directives of the Nigeria Data Protection Commission (NDPC).

1. Who is responsible for your data

The data controller is NoRigging (norigging.live), a citizen initiative convened by Comrade Phils, [postal address to be added]. NoRigging is convened by Comrade Phils.
For any privacy question or request, contact our data protection contact at election@norigging.live.

2. What we collect, and when

• When you verify your email: your email address, and then each answer as you give it (phone number, the two questions, your name and the polling unit you are choosing), so that you can stop and continue later and so that we can remind you to finish. If you never finish, this is deleted after 90 days, or at once if you use the "stop these reminders and delete my details" link in a reminder.
• When you submit your interest: your email address (confirmed by a code), phone number, full name, your state, local government, ward and polling unit, your answers to two questions (whether you are a registered voter and whether you have a smartphone), and the date and time you accepted our terms and pledge.
• If you choose to continue to identity verification: your Voter's number (VIN) and a photo of your voter's card (PVC). The voter's card is the only document we accept, because it shows that you are a registered voter and where you vote. If you prefer not to provide it, you can stop at the interest stage and nothing else happens.
• When you verify your phone: confirmation that the code we sent to your number was entered correctly.
• Automatically: the date, time, internet address (IP) and browser type of your sign-up, kept to prevent abuse. Website visits are counted anonymously, without cookies and without storing IP addresses.

We do not ask for and do not want your political opinions, party membership, religion, ethnic origin, health information or financial details.

3. Why we use it, and our lawful basis

• To register you as a volunteer for your polling unit, contact you, train and deploy you. Lawful basis: your consent, given when you submit your interest (NDPA section 25).
• To confirm that you are a real, eligible person and prevent impersonation. Lawful basis: your separate, explicit consent given before you provide an identity document. Giving a document is voluntary; without it we cannot validate you as an agent, but nothing else happens to you.
• To keep the service secure and to keep records of consent. Lawful basis: our legitimate interest in preventing fraud and showing that we comply with the law.
• To meet a legal obligation, if a court or authority lawfully requires information.

We use your data only for these purposes. We do not sell it, and we do not use it for advertising or for any political party's campaign.

4. How identity documents are checked

• The photo is first read on your own phone to compare the number on the document with the number you typed. This is a convenience check only.
• A member of our verification team then looks at the photo before any application is approved. No decision that affects you is made solely by automated means.
• You can replace the photo or withdraw it at any time before validation.

5. Who can see your data

• Our verification team and administrators, who are bound to confidentiality and can sign in only with individual accounts. Their actions are logged.
• VoteMetrics, the election-monitoring technology we use, receives the details of validated volunteers (name, contact details, polling unit and document number, not the document photo) so that you can be deployed as a field agent.
• Service providers acting on our instructions: our website host ([name and country of the hosting provider to be added]), our email delivery service, and our SMS provider for verification codes. They may process data only for us and must protect it.
• Authorities, only where a law or court order requires it.

We do not publish personal data. The public figures on our site are totals only.

6. Where your data is kept and how it is protected

• Data is stored on servers provided by [name and country of the hosting provider to be added]. If any provider stores data outside Nigeria, we rely on a transfer basis permitted by the NDPA, such as adequate protection in the receiving country or your consent, and we will tell you here.
• While an application is waiting for review, the identity document photo is held in a private area of the server that the public cannot reach; it is shown only to signed-in administrators, and then deleted.
• Connections to the site are encrypted (HTTPS), administrator passwords are stored in hashed form, and access is limited to people who need it.
• No system is perfectly secure. If a breach occurs that is likely to put your rights at risk, we will notify the NDPC within 72 hours of becoming aware of it and inform you without undue delay, as the NDPA requires.

7. How long we keep it

• We keep your volunteer record for up to 12 months after the election you volunteered for, then delete or anonymise it, unless you ask us to delete it sooner.
• We do not keep identity document photos. Each photo is deleted as soon as our verification team has checked the application, whether it is approved or rejected. Only the document number and the result of the check remain.
• Records showing that you gave or withdrew consent, and anonymous statistics, may be kept longer where the law requires or permits.

8. Your rights

Under sections 34 to 38 of the NDPA you have the right to:

• be told how your data is used (this notice);
• ask for a copy of your data, and to receive it in a portable format;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing;
• withdraw your consent at any time, without affecting what was lawfully done before;
• not be subject to a decision based solely on automated processing;
• complain to the Nigeria Data Protection Commission.

How to use them: open the personal link in any email we sent you and choose "Your data", where you can withdraw your identity document or delete your whole application yourself; or write to election@norigging.live. We respond within 30 days and do not charge a fee.

9. Young people

This service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, tell us at election@norigging.live and we will delete the record.

10. Complaints

Please contact us first at election@norigging.live so we can put things right. You may also complain to the Nigeria Data Protection Commission: 1919 Cadastral Zone C06, Mbora District, opposite Efab City Estate, Life Camp, FCT Abuja; info@ndpc.gov.ng; +234 (0) 916 061 5551; https://ndpc.gov.ng

11. Changes to this notice

We will post any change here with a new version and date, and email registered volunteers about significant changes.