PRIVACY POLICY

National Assembly Library Trust Fund (NALTF) Information App

Effective Date: March 19, 2026 | Last Updated: March 19, 2026

1. Introduction

The National Assembly Library Trust Fund (“NALTF”, “we”, “us”, or “our”) is committed to protecting the privacy and personal information of all users of the NALTF Information App (the “App”). This App provides information, updates, and resources related to the National Assembly Library. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the App.

2. Information We Collect

We may collect the following types of information from users of the App:

2.1 Information You Provide Voluntarily

• Full name and contact details (e.g., email address, phone number) when you register or contact us.
• Username and password when creating an account.
• Any feedback, comments, or communications you send to us.
• Professional or institutional affiliation (e.g., academic institution, government agency).

2.2 Information Collected Automatically

• Device information: Device type, operating system version, unique device identifiers (e.g., IMEI, IDFA, GAID).
• Usage data: Pages or features accessed, time spent on the App, search queries, and interaction logs.
• Log data: IP address, browser type, referring URLs, crash reports, and error logs.
• Location data: Approximate geographic location (country/region level), if you grant permission.
• Cookies and similar tracking technologies: For session management and analytics.

2.3 Information from Third Parties

• Analytics data from third-party providers such as Google Analytics for Firebase or Apple Analytics.
• Authentication information if you use third-party sign-in (e.g., Google Sign-In, Apple ID).

3. How We Use Your Information

NALTF uses the information we collect for the following purposes:

• To provide, maintain, and improve the App and its features.
• To create and manage your user account and provide personalized content.
• To respond to enquiries, feedback, and support requests.
• To send administrative communications, including updates to the App or this Privacy Policy.
• To monitor and analyze usage patterns and App performance.
• To ensure compliance with applicable laws, regulations, and institutional policies.
• To detect, prevent, and respond to technical issues, fraud, or security threats.
• To conduct research and reporting in the interest of public library services and legislative information access.

4. Legal Basis for Processing

Where applicable under data protection law, we process your personal information on the following legal bases:

• Consent: Where you have given explicit consent (e.g., for optional analytics).
• Performance of a contract: To provide the services you have requested.
• Legitimate interests: To operate, improve, and secure our App, provided this does not override your rights.
• Legal obligation: To comply with applicable Nigerian laws, including the Nigeria Data Protection Act (NDPA) 2023.

5. Sharing of Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating the App, conducting business, or serving users, provided they agree to keep this information confidential and use it solely to perform services on our behalf.

5.2 Government and Legal Authorities

We may disclose your information if required to do so by law, regulation, or in response to valid requests from public authorities (e.g., a court order or government agency), including in connection with national security or law enforcement requirements.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or transfer of NALTF’s assets or functions, your information may be transferred as part of that transaction.

5.4 Aggregate or Anonymised Data

We may share aggregate, anonymised, or de-identified data that cannot reasonably be used to identify you, for research, reporting, or other analytical purposes.

6. Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When personal information is no longer needed, we will securely delete or anonymise it.

Specifically:

• Account data is retained for the duration of your active use of the App and for a period of two (2) years after account closure.
• Log and usage data is typically retained for a period of twelve (12) months.
• Legal and compliance records may be retained for longer periods as required by applicable law.

7. Data Security

We implement industry-standard technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Secure storage of data with access controls and authentication requirements.
• Regular security assessments and vulnerability testing.
• Staff training and data access limitations based on the principle of least privilege.

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your information and encourage you to use strong passwords and to notify us immediately of any suspected unauthorized use.

8. Your Rights and Choices

Subject to applicable law and verification of your identity, you may have the following rights regarding your personal information:

• Right of Access: To request a copy of the personal information we hold about you.
• Right to Rectification: To request correction of inaccurate or incomplete information.
• Right to Erasure: To request deletion of your personal information, subject to legal retention requirements.
• Right to Restrict Processing: To request that we limit how we process your data in certain circumstances.
• Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: To object to processing of your data based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details provided in Section 13 of this Policy. We will respond to your request within thirty (30) days in accordance with the Nigeria Data Protection Act 2023.

9. Children’s Privacy

The App is not directed at children under the age of thirteen (13), and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete such information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately using the details in Section 13.

10. Third-Party Links and Services

The App may contain links to external websites, databases, or services operated by third parties. This Privacy Policy does not apply to those third-party platforms. We encourage you to review the privacy policies of any third-party services you access through the App. We are not responsible for the privacy practices or content of such external services.

11. International Data Transfers

Your information may be processed and stored on servers located outside of Nigeria. Where we transfer your data internationally, we ensure appropriate safeguards are in place in compliance with applicable data protection laws, including the Nigeria Data Protection Act 2023, the guidelines issued by the Nigeria Data Protection Commission (NDPC), and the General Data Protection Regulation (GDPR) where applicable.

12. Advertising

This App does not contain any advertisements. NALTF does not integrate with any third-party advertising SDKs, nor does it display banner ads, interstitial ads, or native ads.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will notify you of material changes by:

• Posting the revised Privacy Policy within the App with an updated effective date.
• Sending a notification to your registered email address (where applicable).
• Displaying a prominent in-App notice.

Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Data Protection Officer
National Assembly Library Trust Fund (NALTF)
National Assembly Complex, Three Arms Zone
Abuja, Federal Capital Territory, Nigeria
Email: privacy@naltf.gov.ng
Website: www.naltf.gov.ng

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023 and the guidelines issued by the Nigeria Data Protection Commission (NDPC). Any dispute arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Nigeria.

By using the NALTF Information App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.