Your privacy matters. iWillVote complies with the Nigeria Data Protection Regulation (NDPR) and international best practices.
1Information We Collect
We collect the following personal information when you register or participate on iWillVote:
- Full name
- Email address
- Phone number and country code
- State of origin, Local Government Area, and Ward
- IP address and device information
- Browser fingerprint (for fraud prevention)
- NIN and VIN (only when verification is enabled)
- Voting activity and timestamps
2How We Use Your Information
Your information is used to:
- Verify your identity before voting
- Send OTP verification codes
- Prevent duplicate voting and fraud
- Generate your voting receipt
- Send election updates and civic information
- Conduct public opinion research and analytics
- Improve the platform experience
3Legal Basis for Processing
We process your data based on:
- Your explicit consent given during registration
- Legitimate interest in preventing electoral fraud
- Compliance with civic engagement objectives
4Data Sharing
We do not sell your personal data. We may share data with:
- Trusted SMS/Email service providers for OTP delivery
- Analytics partners (anonymised data only)
- Law enforcement when required by Nigerian law
5Data Retention
Your data is retained for:
- Voter registration data: Duration of the election + 2 years
- Audit logs: 1 year
- IP and fraud data: 6 months after the election
6Your Rights Under NDPR
As a data subject, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (subject to legal requirements)
- Withdraw consent at any time
- File a complaint with the National Information Technology Development Agency (NITDA)
7Cookies & Tracking
iWillVote uses:
- Essential cookies for session management
- Analytics cookies (Google Analytics) — only with your consent
- No advertising cookies or third-party trackers beyond analytics
8Security
We protect your data using:
- HTTPS/TLS encryption on all connections
- Hashed and encrypted sensitive fields
- Regular security audits
- IP blocking and fraud detection systems
9Contact Us
For privacy-related requests, contact:
We will respond to all privacy requests within 30 days as required by NDPR.
