Data protection

Privacy policy

This policy is written for a privacy-first public-interest website. It should be reviewed by legal counsel before the site handles significant personal data at scale.

Effective date: 5 May 2026

The People's Ledger is designed to provide voter information, transparency guidance, and volunteer coordination in a way that respects visitor privacy. This page explains what information may be collected, why, how it is protected, and what rights users may exercise.

1. What we collect

On a public browse-only visit, the website is designed to function without third-party trackers. If you submit a volunteer form, we collect the personal information you provide: name, email address, phone number, state, role preference, and any message you include. We do not collect data beyond what you directly submit.

2. Why we collect it

Information is collected only for clear civic-service purposes: responding to enquiries, coordinating volunteers, improving accessibility, and maintaining security. We do not collect data for advertising, profiling, or commercial purposes.

3. Lawful and responsible use

Where personal data is processed, it is done under an appropriate lawful basis — principally consent (where you submit a form) and legitimate interest (where necessary for the civic mission of the platform). We keep records of our basis for processing and review whether collection remains proportionate.

4. Cookies and tracking

This website does not include advertising pixels, third-party analytics tags, session replay tools, or behavioural profiling scripts. The only browser storage used is localStorage to remember your language preference. If analytics are introduced in future, they will be disclosed clearly in this policy and minimised by default.

5. Storage and retention

Personal data submitted through forms is stored securely on our server infrastructure, protected in transit using HTTPS, and retained only for as long as genuinely needed for volunteer coordination purposes. Volunteer data will be deleted or anonymised after the 2027 election cycle, unless you explicitly consent to a longer relationship.

6. Sharing

Personal data is not sold. It is shared only with authorised personnel working on the platform, trusted service providers who process it under equivalent safeguards, or legal authorities where required by Nigerian law.

7. Your rights

You may request access to your personal data, correction of inaccurate information, deletion where appropriate, or information about how your data is used. To exercise any of these rights, contact us at hello@thepeoples-ledger.com. We will respond within a reasonable timeframe consistent with applicable law.

8. Security

We use reasonable technical and organisational measures including encrypted transport (HTTPS/TLS), least-privilege access controls, regular backups, and careful vendor selection. No system is completely impenetrable, but we take security seriously as a public-interest obligation.

9. Children

This site is intended for adult voters and civic participants. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted data through our forms, please contact us so we can remove it promptly.

10. International transfers

Our server infrastructure is hosted in Europe (Hetzner, Nuremberg). Data transferred outside Nigeria is handled under appropriate contractual and technical safeguards. We assess vendor commitments and applicable compliance requirements on an ongoing basis.

11. Regulatory context

This policy is written with reference to Nigerian data protection requirements and guidance from the Nigeria Data Protection Commission (NDPC). We are committed to staying aligned with evolving Nigerian data protection law.

12. Contact

For privacy enquiries, write to us at hello@thepeoples-ledger.com. A Data Protection Officer or privacy lead will be named on this page as the organisation grows.

13. Changes to this policy

We may update this policy from time to time. Material changes will be dated clearly at the top of this page and communicated to active volunteers by email where appropriate.

This website is privacy-first by default. Once form submissions connect to backend storage and email delivery systems, this policy will be reviewed line by line before any data is retained at scale.