Privacy Policy

1. Data Controller

KOHactive27 is the data controller responsible for the personal data you submit through this website. The movement is coordinated by the KOHactive27 team ("we", "us", "our"). For all data-related queries, contact us through our social media channels or at kohactive27.com.

2. Legal Basis for Processing (NDPA 2023)

We process your personal data under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). Our lawful basis for processing is your explicit consent, given when you voluntarily submit a registration form or post a message to the Live Town Hall. You may withdraw consent at any time by contacting us.

3. Information We Collect

• Full name
• Phone number
• Email address (optional)
• Local Government Area (LGA) or LCDA of residence
• Age range
• PVC (Permanent Voter Card) status
• Preferred role or department
• Messages posted to the Live Town Hall
• RSVP information for events

4. Purpose of Processing

• Contacting you about campaign activities in your LGA
• Assigning you to a volunteer unit or program
• Sending event reminders and movement updates
• Tracking voter registration and mobilisation progress
• Improving our programs and outreach strategy

5. Data Storage & Security

Your data is stored on Supabase — a SOC 2 Type II certified cloud database provider using AES-256 encryption at rest and TLS in transit. Access is restricted to authorised members of the KOHactive27 coordination team. We implement rate limiting and access controls on all data submission endpoints.

6. Data Retention

We will retain your personal data for the duration of the 2027 election cycle and no longer than 12 months after the conclusion of the Lagos State governorship election. After that period, data will be securely deleted unless you have consented to a longer retention period or we are required to retain it by law.

7. No Sale of Data

We will never sell, rent, lease, or share your personal information with any third party for commercial purposes. Your data will not be used outside of KOHactive27 campaign coordination activities.

8. Third-Party Processors

We use Supabase (database), Vercel (hosting and edge compute), and Google Fonts (typography). No personal data is shared with these providers beyond what is technically necessary to operate the platform. All processors are contractually bound to data protection standards.

9. Your Rights Under the NDPA 2023

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing at any time
• Right to withdraw consent — without affecting prior lawful processing

To exercise any of these rights, contact us through our social media channels or at kohactive27.com. We will respond within 30 days.

10. Town Hall Posts

Messages posted to the Live Town Hall are visible to all visitors of kohactive27.com. These posts are public. Do not include sensitive personal information, financial data, or third-party personal details in public posts.

11. Complaints

If you believe your data rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

12. Policy Updates

This policy may be updated as the campaign evolves. Continued use of the site constitutes acceptance of the current policy. Material changes will be communicated via our social channels.