Privacy Policy
Last updated: 2026
About this policy
Nexacare Centre for Digital Health and Community Wellbeing (CAC RC 9449732, “Nexacare”, “we”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or interact through our digital channels. This Policy is grounded in the Nigeria Data Protection Act 2023 and the Nexacare Data Protection Policy.
What personal data we collect
- Information you submit through forms: name, email, organisation, subject, message content.
- Information collected automatically: IP address, browser type, device type, pages visited, time spent (for analytics in aggregate).
- Cookies: essential site function and aggregate analytics.
Why we collect it
- To respond to your enquiry or partnership request.
- To process safeguarding concerns routed to the Designated Safeguarding Lead.
- To improve the website and understand usage.
- To meet legal and donor compliance obligations.
Lawful basis
We process data on the lawful bases of consent, legitimate interest, legal obligation (NDPA 2023, statutory filings), and contract performance where applicable.
Sharing of data
We do not sell personal data. We share data only with Nexacare personnel, contracted service providers, regulators as required, and donors under grant agreements.
Retention
Personal data is retained per the Nexacare Records Retention and Disposal Schedule. Form submissions are typically retained for two years; correspondence longer where business need or law requires.
Your rights under the NDPA 2023
- Right of access, rectification, erasure, restriction, portability, objection.
- Right to lodge a complaint with the Nigeria Data Protection Commission.
To exercise any of these rights, contact myrights@nexacarecentre.org.
Security
We protect personal data through technical and organisational measures: encryption in transit (HTTPS), access controls, backups, and staff training.
Updates to this Policy
This Policy may be updated periodically. The “Last updated” date reflects the most recent change. Material changes will be communicated through the website.
Data Protection Officer
The Nexacare Data Protection Officer is reachable at dpo@nexacarecentre.org.