Nigeria Governors' Forum

The Nigeria Governors’ Forum  (“NGF”), as the Data Controller, is committed to protecting the privacy and personal data of all users of the Nigeria Governors’ Forum e-Learning Management System (“eLMS”), and accordingly collects, uses, stores, and processes personal data in accordance with applicable laws, including the Nigeria Data Protection Act, 2023.

By accessing or using the Platform, you acknowledge that you have read and understood this notice and consent where required, to such processing, which may include the collection of identification information such as name, title, and organisation, contact details such as email address and phone number, professional information such as role, institution, and sector, login credentials and account identifiers, learning activity records, course progress, assessment scores, certification records, technical and usage data such as IP address, device type, browser, and log files, and communications or support requests.

Provided that we do not intentionally collect sensitive personal data unless strictly necessary and lawfully permitted; such personal data is processed only where lawful, including where necessary for performance of a contract, compliance with legal or regulatory obligations, performance of tasks carried out in the public interest. 

Legitimate institutional interests that do not override user rights, or user consent where specifically required, and where processing is based on consent, such consent may be withdrawn at any time without affecting prior lawful processing. 

Personal data is processed solely for legitimate purposes including user registration and account management, delivery of training and educational services, monitoring course participation and performance, issuing certificates and completion records, improving learning content and platform performance, administrative reporting and analytics, compliance, audit and regulatory obligations, and provision of technical support and system security.

We may share personal data only where necessary and lawful with authorised training partners and facilitators, technology service providers and platform hosts, auditors and professional advisers, and relevant government or regulatory authorities, all of whom act as authorised Data Processors under written agreements and confidentiality obligations, and we do not sell or rent personal data. Where personal data is transferred outside Nigeria, such transfer shall occur only where adequate safeguards and lawful transfer mechanisms are in place in accordance with applicable law.

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, administrative, audit, and reporting obligations, after which it will be securely deleted or anonymised.

We implement appropriate technical and organisational measures, including secure servers, encryption protocols, access controls, authentication systems, monitoring mechanisms, and staff confidentiality obligations, to safeguard personal data, although no system can guarantee absolute security; subject to applicable law, users have the right to request access to their personal data, request correction of inaccurate data, request deletion, restrict or object to processing, request portability, or withdraw consent where processing is consent-based, and all such requests will be handled in accordance with legal requirements and timelines. 

In the event of a personal data breach that poses a risk to users’ rights or freedoms, NGF will notify affected individuals and relevant authorities as required by law. 

The Platform is intended for professional and institutional users and we do not knowingly collect personal data from persons under 18 years of age without appropriate authorisation or lawful basis.

All privacy requests, complaints, or enquiries may be directed to the designated Data Protection Officer via [email protected] and [email protected]. Where a user is dissatisfied with our response, such user may lodge a complaint with the appropriate data protection regulator. 

We may update this notice from time to time to reflect legal, technical, or operational changes, and the most current version will always be available on the Platform, and by registering for or continuing to use the Platform, you acknowledge that you have been informed of how your personal data is collected, used, stored, shared, and protected as described herein.