1. Purpose

This Data Policy outlines how the Word-Wise Educational Support & Advancement Foundation collects, processes, stores, and protects data in accordance with the Nigeria Data Protection Act (NDPA) and applicable data protection regulations.

2. Data Controller

The Word-Wise Educational Support & Advancement Foundation is the data controller for personal information collected through our website and programmes. Our registered address is Suite 14D Halima Plaza, Balanga Crescent, Behind Old Sahad Stores, Garki Area 11, Abuja, Nigeria.

3. Lawful Basis for Processing

We process personal data on the following lawful bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., newsletter subscription)
• Contract: Where processing is necessary for the performance of a contract (e.g., competition registration)
• Legitimate Interest: Where processing is necessary for our legitimate interests, such as improving our programmes and services
• Legal Obligation: Where processing is required by law

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Competition records: Retained for 5 years for archival and statistical purposes
• Contact inquiries: Retained for 2 years after resolution
• Newsletter subscriptions: Retained until you unsubscribe
• Usage analytics: Anonymized data may be retained indefinitely

5. Data Transfers

Your data is stored on servers located in Nigeria. We do not transfer personal data outside Nigeria without appropriate safeguards.

6. Third-Party Services

We use the following third-party services that may process your data:

• YouTube (Google): For video hosting and embedding. Subject to Google's Privacy Policy.
• Google Fonts: For website typography. Subject to Google's Privacy Policy.

7. Data Breach Response

In the event of a data breach, we will notify affected individuals and the relevant regulatory authority within 72 hours of becoming aware of the breach, in accordance with applicable laws.

8. Your Data Rights

Under the NDPA, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, contact us at [email protected].