Privacy Statement

At the National AIDS, Viral Hepatitis & STIs Control Programme (NASCP), we value the protection of your personal information and are committed to processing it responsibly, lawfully, and transparently, in compliance with applicable data protection laws and regulations, including the Nigeria Data Protection Act (NDPA) 2023 and related regulations.

This Privacy Statement describes NASCP’s general privacy practices that apply to personal information collected, used, and shared through the NASCP Website, and in the course of our interactions with members of the public, partners, consultants, vendors, and other organizations with which NASCP has or proposes to have a working relationship.

This Privacy Statement is supplemented by additional notices that may be provided in specific online contexts or in relation to particular services, activities, or engagements.

Why and How We Collect and Use Your Personal Information

NASCP may collect and use personal information for various purposes, including the following:

Access and Use of the Website

When you visit the NASCP website, we may collect information necessary to provide you with access and to ensure the secure and effective operation of the Website. This may include:

• IP address

• Browser type and settings

• Device and operating system information

• Date, time, and duration of visits

We also collect information about your activities on the Website to understand usage patterns, improve content and functionality, personalize user experience where applicable, and meet security, audit, and legal requirements.

Responding to Requests for Information or Support

When you contact NASCP online or offline to request information, submit feedback, participate in surveys, or seek support, we may collect personal information such as:

• Email address

• Organization or affiliation

• Details of your request or communication

This information is used to respond to your request, manage communications, improve services, and for administrative, legal, and record-keeping purposes. Where registration is required for specific services, events, or resources, such registration may also enable NASCP to identify you during subsequent visits and allow you to manage your preferences.

Engagements, Events, and Communications

When you register for NASCP-organized events, webinars, trainings, or mailing lists, we may collect information related to event organization and participation. Information collected may be used to:

• Manage registrations and attendance

• Communicate event-related updates

• Conduct surveys and evaluations

Aggregated and anonymized data may be used for programme planning, reporting, and improvement purposes.

Legal Basis for Processing

NASCP processes your information on one or more of the following legal bases:

• Consent provided by the individual

• Performance of tasks carried out in the public interest

• Compliance with legal and regulatory obligations

• Legitimate interests related to website administration, communications, security, and service improvement

Sharing of Personal Information

NASCP does not sell or rent personal information. Personal information may be shared only where necessary and lawful, including:

• With authorized government institutions or agencies where required by law or policy

• With service providers engaged to support website hosting, maintenance, or communications, under appropriate confidentiality and data protection obligations

• Where disclosure is required to comply with legal processes, court orders, or regulatory requirements

In the event of institutional restructuring or reorganization, appropriate safeguards will be applied to any personal information involved.

Information Security and Accuracy

NASCP implements reasonable technical, administrative, and organizational safeguards to protect all information against unauthorized access, loss, misuse, alteration, or disclosure. Measures include secure hosting environments, access controls, and routine system monitoring.

NASCP also takes reasonable steps to ensure that personal information is accurate, complete, and up to date for the purposes for which it is processed.

Retention of Personal Information

Personal information is retained only for as long as necessary to fulfill the purposes for which it is collected, including compliance with legal, regulatory, audit, and reporting obligations. Where no longer required, information is securely deleted or anonymized.

Your Rights

Subject to applicable law, you have the right to:

• Request access to your personal information

• Request correction of inaccurate or incomplete information

• Object to or restrict certain types of processing

• Withdraw consent where processing is based on consent

Requests will be handled in accordance with applicable legal requirements and operational considerations.

Cookies and IP Addresses

The NASCP Website uses cookies and similar technologies to distinguish users, support core website functionality, analyze usage, and improve user experience.

Cookies used may include:

• Strictly necessary cookies required for basic website operation

• Analytical cookies to understand how users navigate and use the Website

• Functionality cookies to remember user preferences

You may control or disable cookies through your browser settings. Blocking certain cookies may affect the availability or functionality of parts of the Website.

Changes to This Privacy Statement

NASCP may update this Privacy Statement from time to time. Updates will be published on this page with a revised effective date.

Contact Information

For questions, concerns, or requests relating to this Privacy Statement or the processing of personal information, please contact:

National AIDS, Viral Hepatitis & STIs Control Programme (NASCP)

info@nascp.gov.ng

2nd Floor, Edo house, 75 Ralph Shodeinde street, Central area, FCT