Privacy Policy

Your Privacy Rights

This Privacy Policy describes your rights regarding our collection, use, storage, sharing, and protection of your personal information. It applies to the PSIRS website (psirs.gov.ng), all applications, services, tools, and physical contact with us—regardless of how you access or use them.

If you are given a username, identification code, password, or any other piece of information as part of our access security measures, you must treat such information as confidential and not disclose it to any third party. We reserve the right to disable any user identification code or password at any time if you have failed to comply with any of the provisions of these conditions. If you know or suspect that anyone other than you knows your security details, you must promptly notify us at contactus@psirs.gov.ng.

Consent

You accept this Privacy Policy when you give consent upon access to our platforms, or use our services, content, features, technologies, or functions offered on our website, digital platforms, or visit any of our offices for official or non-official purposes (collectively "PSIRS Services").

This Policy governs the use of PSIRS services and intervention projects by our users and stakeholders unless otherwise agreed through written contract. We may amend this Privacy Policy at any time by posting a revised version on our website or placing such notice at conspicuous points at our office facilities. The revised version will be effective 7 days after posting.

Your Personal Information

When you use PSIRS Services, we collect information sent to us by your computer, mobile phone, or other electronic access device. The automatically collected information includes but is not limited to:

• Data about the pages you access
• Computer IP address, device ID or unique identifier, device type
• Geo-location information, computer and connection information
• Mobile network information, statistics on page views
• Traffic to and from the sites, referral URL, ad data
• Standard web log data, still and moving images

We may also collect information you provide us, including:

• Information on web forms, survey responses
• Account update information, email, phone number
• Organization you represent, official position
• Correspondence with PSIRS support services and telecommunication with PSIRS
• Information about your transactions, enquiries, and activities on our platform or premises

We may also use information provided by third parties like social media sites. Information about you provided by other sites is not controlled by PSIRS and we are therefore not liable for how they use it.

What We Do With Your Personal Information

The purpose of our collecting your personal information is to give you an efficient, enjoyable, and secure customer experience. We may use your information to:

1. Provide PSIRS services and support
2. Process applications and send notices about your transactions to requisite parties
3. Verify your identity
4. Resolve disputes, collect fees, and troubleshoot problems
5. Manage risk, or to detect, prevent, and/or remediate fraud or other potentially prohibited or illegal activities
6. Detect, prevent, or remediate violations of laws, regulations, standards, guidelines, and frameworks
7. Improve the PSIRS Services by implementing aggregate customer preferences
8. Measure the performance of the PSIRS Services and improve content, technology, and layout
9. Trace information breach and remediate such identified breaches
10. Manage and protect our information technology and physical infrastructure
11. Contact you at any time through your provided telephone number, email address, or other contact details

Cookies

Cookies are small files placed on your computer's hard drive that enable the website to identify your computer as you view different pages. Cookies allow websites and applications to store your preferences in order to present contents, options, or functions that are specific to you.

Like most interactive websites, our website uses cookies to enable the tracking of your activity for the duration of a session. Our website uses only encrypted session cookies which are erased either after a predefined timeout period or once the user logs out of the platform and closes the browser. Session cookies do not collect information from the user's computer. They typically store information in the form of a session identification that does not personally identify the user.

How We Protect Your Personal Information

We store and process your personal information on our computers in Nigeria. Where we need to transfer your data to another country, such country must have an adequate data protection law. We will seek your consent where we need to send your data to a country without an adequate data protection law.

We protect your information using physical, technical, and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure, and alteration. Some of the safeguards we use include:

• Firewalls and data encryption
• Physical access controls to our data centers
• Information access authorization controls
• SSL/TLS for secure transmission of personal data
• ISO 27001 compliant systems (AWS, Kaspersky Antivirus)
• Biometric access control to physical locations

This site uses Secure Sockets Layer/Transport Layer Security (SSL/TLS) to ensure secure transmission of your personal data. You should see the padlock symbol in your URL address bar once you are successfully logged into the platform. The URL address will also start with https:// depicting a secure webpage.

How We Share Your Information

During your interaction with our website or premises, we may provide other Ministries, Departments, Agencies (MDA), other organs of government, and private sector operators performing government functions with information such as your name, contact details, or other details you provide us for the purpose of performing our statutory mandate to you or third parties.

We work with third parties, especially government agencies and authorised payment channels (NIBSS, Interswitch, Remita), to perform PSIRS mandate and services. In doing so, a third party may share information about you with us, such as your email address or mobile phone number.

You accept that your pictures and testimonials on all social media platforms about PSIRS can be used for limited promotional purposes by us. This does not include your trademark or copyrighted materials.

From time to time we may send you relevant information such as news items, enforcement notices, statutorily mandated notices, and essential information to aid our performance of our mandate. We may also share your personal information in compliance with national or international laws; crime prevention and risk management agencies; and service providers.

Your Data Rights

Your information is regarded as confidential and will not be divulged to any third party except under legal and/or regulatory conditions. You have the right to:

• Access: Request sight of, and copies of, any and all information we keep on you, in compliance with the Freedom of Information Act and other relevant enactments
• Rectification: Request that we correct or amend your personal data
• Erasure: Request that we erase your personal data, subject to legal retention requirements
• Data Subject Access Request: Submit a formal written request or complete our Data Subject Access Request (DSAR) form

While PSIRS is responsible for safeguarding the information entrusted to us, your role in fulfilling confidentiality duties includes adopting and enforcing appropriate security measures such as non-sharing of passwords and other platform login details, adherence with physical security protocols on our premises, and dealing only with authorised officers of the Agency.

Links to Other Websites

Certain transaction processing channels may require links to other websites or organisations other than ours. PSIRS is not responsible and has no control over websites outside its domain. We do not monitor or review the content of other party's websites which are linked from our website or media platforms. Please be aware that we are not responsible for the privacy practices or content of these sites. We encourage our users to read the privacy statements of these sites before disclosing any personal information to them.

Contact Our Data Protection Officer

Governing Law

This Privacy Policy is made pursuant to the Nigeria Data Protection Act 2023 (NDPA) and other relevant Nigerian laws, regulations, or international conventions applicable to Nigeria. Where any provision of this Policy is deemed inconsistent with a law, regulation, or convention, such provision shall be subject to the overriding law, regulation, or convention.