Privacy policy

1. About this policy

This Privacy Policy applies to the KDBS Open Data Platform ("Platform") operated by the Kaduna State Bureau of Statistics ("KDBS", "we", "us", or "our"), accessible at kdbs.gov.ng.

We are committed to safeguarding the privacy of our users. This policy sets out how we collect, use, disclose, and protect personal information in accordance with applicable Nigerian data protection regulations, including the Nigeria Data Protection Regulation (NDPR).

2. Information we collect

We collect information to provide and improve the Platform. This falls into two categories:

We do not collect sensitive personal data such as national identification numbers, biometric data, financial account details, or health information.

3. How we use your information

We use the information collected for the following purposes:

• Platform operation — to create and manage user accounts, authenticate logins, and process dataset publishing workflows.
• Communication — to respond to enquiries submitted via the contact form, send system notifications, and deliver updates about the Platform.
• Analytics and improvement — to understand how the Platform is used and to diagnose technical issues, improve performance, and prioritise new features.
• Security — to detect, prevent, and respond to fraud, abuse, or security incidents.
• Legal compliance — to fulfil obligations under applicable laws and government directives.

We will not use your personal data for purposes that are incompatible with those stated in this policy without your prior consent.

4. Cookies and tracking

The Platform uses cookies — small text files stored in your browser — to enable essential functionality and improve user experience. We use the following types of cookies:

• Essential cookies — required for the Platform to function, including session management and login authentication. These cannot be disabled.
• Analytics cookies — used to collect anonymised data about how users navigate the Platform. This helps us improve content and performance.
• Preference cookies — used to remember settings such as language preferences across sessions.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality.

5. Sharing your information

We do not sell, rent, or trade your personal information to third parties. We may share data in the following limited circumstances:

• Service providers — trusted third-party vendors that help us operate the Platform (e.g. cloud hosting, email delivery), under strict confidentiality agreements.
• Government agencies — Kaduna State government bodies where required for official purposes or when mandated by law.
• Legal obligations — where disclosure is required by a court order, law, or regulatory authority.

Any third parties we engage are required to process personal data only on our instructions and in accordance with applicable data protection law.

6. Data retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Specifically:

• Account data is retained for as long as your account is active. If you request account deletion, your data will be removed within 30 days, except where we are required to retain it for legal or audit purposes.
• Usage logs and analytics data are typically retained for 12 months, after which they are anonymised or deleted.
• Contact form submissions are retained for 12 months to allow follow-up on enquiries.

7. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include:

• HTTPS encryption for all data transmitted to and from the Platform.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security reviews and vulnerability assessments.
• Secure password hashing for user account credentials.

While we strive to protect your information, no internet-based system is completely secure. We encourage users to take care with their account credentials and to report any suspected security issues to security@kdbs.gov.ng.

8. Your rights

In accordance with the Nigeria Data Protection Regulation (NDPR) and applicable laws, you have the following rights regarding your personal data:

To exercise any of your rights, please contact us using the details in the section below. We will respond to all verified requests within 30 days.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage users to review this policy periodically.

Continued use of the Platform after any changes constitutes your acceptance of the revised policy.

10. Contact us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Officer: