Privacy Policy

1. Introduction

The Ondo State Government ("we," "us," or "our") operates the official government portal and various digital services for the benefit of citizens, residents, and visitors. This Privacy Policy describes our practices regarding the collection, use, and disclosure of your information when you use our Services and tells you about your privacy rights and how the law protects you.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

We collect several types of information from and about users of our Services, including:

2.1 Personal Information

While using our Services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This includes:

Category	Examples	Purpose
Identity Data	Full name, date of birth, gender, nationality, BVN, NIN	Service delivery, identity verification
Contact Data	Email address, phone number, residential address, postal address	Communication, service updates
Government IDs	Driver's license, passport number, voter's card, tax ID	Legal compliance, service eligibility
Financial Data	Bank account details, payment card information, tax records	Fee payments, tax collection, refunds
Technical Data	IP address, browser type, device information, operating system	Website optimization, security
Usage Data	Pages visited, time spent, clicks, downloads, search queries	Service improvement, analytics
Profile Data	Username, password, preferences, feedback, survey responses	Account management, personalization

2.2 Special Categories of Personal Data

In limited circumstances, we may collect sensitive personal data such as:

• Health information (for healthcare services, disability support)
• Biometric data (for identity verification in certain services)
• Criminal records (for background checks in employment or licensing)

We will only collect such information when necessary and with your explicit consent or as required by law.

3. How We Collect Information

We collect information through various methods:

3.1 Direct Interactions

You provide information when you:

• Register for an account or create a profile
• Apply for government services, permits, or licenses
• Make payments or conduct financial transactions
• Subscribe to newsletters or alerts
• Complete forms, surveys, or applications
• Contact us for support or information
• Participate in public consultations or feedback mechanisms

3.2 Automated Technologies

As you navigate through our Services, we may automatically collect technical data about your equipment, browsing actions, and patterns. This helps us improve our Services and deliver better experiences.

3.3 Third Parties

We may receive information about you from third parties, including:

• Other government agencies (with your consent or as authorized by law)
• Service providers processing transactions on our behalf
• Publicly available sources
• Social media platforms when you interact with our content
• Credit bureaus and verification services

4. How We Use Your Information

We use your information for the following purposes:

Purpose	Legal Basis
To provide and deliver government services	Performance of public task, legal obligation
To process applications and transactions	Contractual necessity, legal obligation
To verify your identity and prevent fraud	Legal obligation, public interest
To communicate with you about services	Performance of public task, legitimate interests
To improve and personalize your experience	Legitimate interests, consent
To comply with legal and regulatory requirements	Legal obligation
To send administrative information and updates	Performance of public task, legal obligation
To analyze usage and improve our Services	Legitimate interests, public interest
To protect rights, property, and safety	Legal obligation, public interest
For research and statistical purposes	Public interest, legitimate interests

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to others. We may share your information in the following circumstances:

5.1 Within Government

We may share your information with other government ministries, departments, and agencies when necessary to:

• Process your applications or requests that involve multiple agencies
• Verify information you've provided
• Coordinate service delivery
• Comply with legal requirements

5.2 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, such as:

• Payment processing
• IT services and cloud hosting
• Data analysis
• Customer support
• Email delivery

These providers have access to personal information only to perform these tasks and are contractually obligated to protect your information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• To comply with a legal obligation
• To protect and defend our rights or property
• To prevent or investigate possible wrongdoing
• To protect the personal safety of users or the public
• To protect against legal liability

5.4 Aggregate Information

We may share aggregated, anonymized information that cannot reasonably be used to identify you for research, analysis, and reporting purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Strict authentication and authorization procedures
• Regular Audits: Periodic security assessments and penetration testing
• Employee Training: Staff are trained on data protection best practices
• Incident Response: Procedures for responding to data breaches

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. Specific retention periods vary based on:

• The nature of the service provided
• Legal and regulatory requirements
• Statutes of limitations
• Archival requirements for public records

When information is no longer needed, we securely delete or anonymize it.

8. Your Rights

Under the Nigeria Data Protection Regulation (NDPR), you have the following rights regarding your personal information:

To exercise these rights, please contact our Data Protection Officer using the information in Section 13. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small files placed on your device that help us:

• Remember your preferences and settings
• Understand how you use our website
• Improve site functionality and performance
• Provide relevant content

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic website functionality (login, security, session management)	Session / Persistent
Preference Cookies	Remember your settings and preferences (language, theme)	1 year
Analytics Cookies	Help us understand how visitors interact with our website	2 years
Social Media Cookies	Enable sharing content on social platforms	Varies

9.2 Managing Cookies

You can control and manage cookies in your browser settings. Most browsers allow you to:

• View cookies stored on your device
• Delete individual or all cookies
• Block cookies from specific sites
• Block all cookies

Please note that disabling certain cookies may affect website functionality and your ability to use some services.

10. Children's Privacy

Our Services are intended for general audiences and are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than Nigeria where our service providers are located. We ensure that appropriate safeguards are in place to protect your information in accordance with NDPR requirements, including standard contractual clauses or adequacy decisions.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we may provide more prominent notice through email or website alerts. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us / Data Protection Officer

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact:

Nigeria Data Protection Commission

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

• Website: www.ndpc.gov.ng
• Email: complaints@ndpc.gov.ng
• Phone: +234 (0) 9 291 0720