Privacy policy

1. About this policy

This policy applies to the KDBS Open Data Platform at ckan.kdbs.ng, operated by the Kaduna State Bureau of Statistics (“KDBS”, “we”, “us”).

KDBS processes personal data in accordance with the Nigerian Data Protection Act (NDPA), the Kaduna State Data Protection Regulations, and applicable international data protection standards.

2. Statistical data and confidentiality

The datasets published here are official statistics. KDBS publishes aggregated statistical data and anonymised microdata; restricted or sensitive data is not published openly and is released only under a Data Use Agreement with additional controls.

Anyone accessing KDBS data must not attempt to re-identify individuals, households, facilities or organisations represented in the data, and must not contact persons represented in it. These obligations are set out in full in our Terms and Conditions.

3. Information we collect

4. How we use your information

• Providing the service — authenticating your account and attributing the datasets you publish or edit.
• Responding to you — answering enquiries and data requests you send us.
• Security and integrity — detecting misuse, investigating incidents and keeping an audit trail of changes to official statistics.
• Legal obligations — meeting the statutory duties of the Bureau under Kaduna State House of Assembly Law No. 3 of 2014 and applicable data protection law.

We do not sell, rent or trade personal information, and we do not use your personal information for advertising.

5. Cookies

This platform uses essential cookies only. They keep you signed in for the duration of your session and protect forms against cross-site request forgery. They are required for the platform to work and carry no advertising or profiling function.

The platform does not run third-party advertising or analytics trackers.

6. Sharing your information

We do not sell or trade personal information. We may share it only in these limited circumstances:

• Email delivery — messages such as password resets and notifications are sent through a third-party email delivery provider acting on our instructions.
• Legal requirement — where disclosure is required by law, court order, or lawful request from a competent authority.

Any third party we engage is required to process personal data only on our instructions and in accordance with applicable data protection law.

7. Data security

KDBS protects data using secure systems, controlled access limited to authorised personnel, and encrypted transmission. The same standards are required of anyone we release data to: password protected devices and secure servers, no transfer over unencrypted channels, access limited to authorised project team members, and secure disposal when a project ends.

If you become aware of an actual or suspected breach involving KDBS data, notify us immediately and in any case within 24 hours at info@kdbs.ng, with full details of the breach, the records affected and the potential risks.

8. Your rights

Under the Nigerian Data Protection Act you have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to request erasure where the law permits, to object to or restrict certain processing, and to receive your data in a portable form.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. Note that these rights apply to your personal data; they do not extend to official statistics published in the public interest.

9. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The revision date at the top of this page shows when it was last changed. Material changes will be communicated on the platform.

10. Contact us