1. Information We Collect

We collect information directly provided by you through our website subscription and registration forms, specifically:

• Supporter Contacts: Name, email address, and general enquiry messages.
• Volunteer Details: Name, email address, phone number, Local Government Area (LGA) chapter, specific campaign interests, and custom coordinator notes.
• Newsletter Registrations: Email address and first/last name for mailing lists.
• System Metadata: Standard analytics including IP address, user-agent details, same-origin referrers, and basic browser identifiers to protect administrative gateways.

2. Legal Basis and Purpose of Processing

We process your Personal Data based on one or more of the following legal grounds:

• Consent: When you explicitly opt-in to volunteer or subscribe to the newsletter. You can withdraw your consent at any time.
• Legitimate Interests: To coordinate campaign operations, respond to direct public enquiries, and maintain application security audits.

3. Retention and Storage Policies

Your information is stored securely in our Firestore databases located in Africa region instances and routed through secure email delivery systems (Resend). We enforce strict NDPR retention schedules.

Supporter records are retained only for the duration of the campaign lifecycle and subsequent administrative wrap-up. In accordance with governance constraints, you may request physical erasure of your records at any time.

4. Security Measures

We implement comprehensive technical and organizational safeguards. All web traffic flows exclusively over HTTPS. Sensitive database mutations and access points are restricted to authenticated operators under strict deny-by-default role-based policies.

Mutations are audited, signed, and validated against SHA-256 integrity hashes to prevent unauthorized database tampering.

5. User Rights

Under the Nigeria Data Protection Act, you possess the right to:

• Request access to your stored Personal Data.
• Request immediate correction of inaccurate or incomplete contact records.
• Request erasure of your volunteer profile or newsletter subscription details.
• Restrict or object to processing of your records for political updates.

6. Third-Party Sharing

The Campaign does not sell, trade, or rent supporter data to commercial third parties. Data is shared only with trusted infrastructure providers (such as hosting and notification delivery systems) necessary to execute campaign communications.

7. Contact Details

If you have any questions regarding this Privacy Policy, wish to exercise your rights, or have a data concern, please email: hello@sharafadeenalli.ng.