Privacy Policy

1. Introduction

This Privacy Policy explains how Triple Helix Nigeria (“THN”, “we”, “us” or “our”) collects, uses, stores, shares and protects the personal data of individuals (“you”, “data subjects”) who interact with us, including visitors to our website, users of the SciBiz mobile app, members, partners, event attendees, job applicants and members of the public.

By using our website or the SciBiz app, or by providing your personal data to us, you acknowledge that you have read and understood this policy. Where required by law, we will obtain your consent before processing your personal data.

2. Who we are

Triple Helix Nigeria is a not-for-profit organisation registered with the Corporate Affairs Commission (CAC) of Nigeria and the national chapter of the Triple Helix Association. Triple Helix Nigeria is the data controller responsible for your personal data, which means we determine the purposes and means by which it is processed.

Triple Helix Nigeria owns and operates the SciBiz mobile app, the official app of the SciBiz Annual Conference, and is the legal entity responsible for it. The app is published on Google Play under the developer name “SciBiz”. The details below match the app’s store listing:

App name

SciBiz

Developer name

SciBiz

Legal entity

Triple Helix Nigeria

Android package

com.abubakarmana01.cclconference

iOS bundle ID

com.cyphercrescent.cclconference

Contact

innovation@triplehelixnigeria.org

Our data protection practices are overseen by our Data Protection Officer (DPO), whose contact details are provided in the “Contact us” section below.

3. The SciBiz mobile app

The SciBiz app gives registered attendees of the SciBiz Annual Conference access to the event programme, sessions, speakers, abstracts, sponsors and announcements. This section describes exactly what the app does with your data.

Data the app collects

• Email address, which you enter to sign in. We use it to identify your conference registration and to send you a one-time sign-in passcode.
• Sign-in passcode, a six-digit code we email to you. It is used only to verify your identity and is not stored on your device.
• Account profile, such as your name and email address from your conference registration. It is returned to the app after sign-in and shown to you.
• Technical data, such as your IP address and request timestamps, which our servers log when the app loads content. We use it for security and troubleshooting.

Data stored on your device

After you sign in, the app keeps an authentication token and your basic profile in the device’s private app storage so that you stay signed in. Signing out from the app’s Settings screen removes this data from your device. Uninstalling the app also removes it.

Data the app does not collect

• The app does not access your location, contacts, camera, microphone, photos or files.
• The app does not use advertising identifiers and does not show advertisements.
• The app contains no third-party analytics or tracking SDKs.
• We do not sell personal data collected through the app. We do not share it for advertising purposes.

Links to other services

Some content in the app, such as live-session streams, speaker profiles, sponsor websites and abstract documents, opens in your browser or another app. Those services are governed by their own privacy policies.

4. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity data: full name, title, date of birth and gender.
• Contact data: email address, phone number and postal address.
• Professional data: employer, job title, qualifications, CV and other details you provide when you apply for a role or for membership.
• Transaction data: records of membership, donations, payments and event registrations.
• Account data: sign-in credentials and one-time passcodes for our portal and the SciBiz app.
• Technical data: IP address, browser type, device information and cookies (see “Cookies and tracking”).
• Communications data: your correspondence with us and your contact preferences.

We do not generally seek to collect sensitive personal data (such as data revealing health, religious or political beliefs). Where we do, we will rely on your explicit consent or another lawful basis permitted under the NDPA.

5. How we collect your data

We collect personal data:

• Directly from you, when you fill out a form, register for an event, sign in to the SciBiz app, apply for a role, subscribe to updates or contact us;
• Automatically, through cookies and similar technologies when you use our website, and through server logs when you use our website or the app;
• From third parties, such as partner organisations, referees or publicly available sources, where lawful.

6. Lawful basis for processing

Under the NDPA, we only process your personal data where we have a lawful basis to do so. These include:

• Consent: where you have given clear consent for a specific purpose;
• Contract: where processing is necessary to perform a contract with you (for example, your conference registration) or to take steps at your request before entering into a contract;
• Legal obligation: where we must process your data to comply with the law;
• Legitimate interest: where processing is necessary for our legitimate interests and is not overridden by your rights;
• Public interest: where processing is necessary to carry out a task in the public interest.

7. How we use your data

We use your personal data to:

• Provide, administer and improve our services, programmes and events;
• Verify your identity and give you access to the SciBiz app and our portal;
• Manage your membership, conference registration, partnership or job application;
• Respond to your enquiries and communicate with you;
• Send you updates, newsletters and information where you have requested them;
• Comply with our legal and regulatory obligations;
• Maintain the security and integrity of our website, app and systems.

8. Sharing and disclosure

We do not sell your personal data. We may share your data with:

• Service providers and data processors who act on our behalf under written contracts, such as hosting and email delivery providers;
• Partner institutions across academia, industry and government where necessary for a stated purpose;
• Regulatory authorities, law enforcement or courts where required by law.

Where we engage data processors, we require them to apply appropriate security measures and to process personal data only on our documented instructions.

9. International transfers

Where we transfer your personal data outside Nigeria, we will ensure that an adequate level of protection is in place as required by the NDPA. For example, the recipient country may provide adequate protection, appropriate safeguards (such as contractual clauses) may be in place, or you may have given your consent.

10. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements. One-time sign-in passcodes expire shortly after they are issued. When data is no longer required, we securely delete or anonymise it.

11. Account and data deletion

You can ask us to delete your SciBiz account and the personal data associated with it at any time. To do so:

1. Email innovation@triplehelixnigeria.org with the subject “SciBiz account deletion”.
2. Send the email from the address you use to sign in, so that we can verify the request.
3. We will confirm your request and delete your account and associated personal data within 30 days.

Some records may be kept after deletion where the law requires it, such as payment and accounting records. We keep them only for the period the law requires. Signing out of the app removes your data from your device but does not delete your account.

12. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include access controls, encryption of data in transit (HTTPS) between our website or app and our servers, and staff confidentiality obligations. In the event of a personal data breach that poses a risk to your rights, we will notify the National Data Protection Commission (NDPC) and, where required, affected individuals.

13. Your rights

Under the NDPA, you have the right to:

• Be informed about how your personal data is processed;
• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data (see “Account and data deletion”);
• Object to or restrict processing of your data;
• Withdraw consent at any time, where processing is based on consent;
• Data portability, where applicable;
• Lodge a complaint with the National Data Protection Commission.

To exercise any of these rights, please contact our Data Protection Officer using the details below. We will respond within the timeframes required by law.

14. Children

Our website and the SciBiz app are intended for adults and are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Cookies and tracking

Our website uses cookies and similar technologies to enable core functionality, analyse usage and improve your experience. When you first visit our site, a cookie consent banner allows you to choose which categories of cookies you accept. The SciBiz app does not use cookies or tracking technologies.

You may change your preferences at any time by clicking "Cookie Preferences" in the website footer or by using the button below. You can also manage or disable cookies through your browser settings, though some parts of the site may not function correctly as a result.

16. Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can address them. You also have the right to lodge a complaint with the National Data Protection Commission (NDPC), the regulatory authority for data protection in Nigeria.

17. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our website, the SciBiz app, our practices or legal requirements. Any updates will be posted on this page with a revised “Last updated” date.

18. Contact us

For any questions about this Privacy Policy, the SciBiz app or to exercise your data protection rights, please contact our Data Protection Officer: