Privacy Policy

1. Introduction

The Government Enterprise and Empowerment Programme (GEEP), under the National Social Investment Programme Agency (NSIPA), is committed to protecting the privacy and personal data of all beneficiaries and users of the FarmerMoni Revalidation Portal. This Privacy Policy outlines how we collect, use, store, and protect your personal information in compliance with the Nigeria Data Protection Regulation (NDPR) 2019.

2. Legal Basis for Data Processing

We process your personal data under the following legal bases:

• Consent: You provide explicit consent when you use the revalidation portal
• Legal Obligation: We are required to verify beneficiary information for government social investment programmes
• Legitimate Interest: Processing is necessary to determine continued eligibility for the FarmerMoni programme

3. Information We Collect

During the revalidation process, we collect and process the following personal information:

• Identity Verification Data: Last 4 digits of your Bank Verification Number (BVN)
• Contact Information: Registered phone number
• Profile Information: Full name, residential address (partially masked), Local Government Area (LGA), State
• Photographic Data: Beneficiary photograph (if available in our records)
• Technical Data: IP address, device information, and browser type (for security purposes)
• Transaction Data: Revalidation attempts, timestamps, and confirmation status

4. How We Use Your Information

We use your personal information for the following purposes:

• To verify your identity and authenticate you as a registered FarmerMoni beneficiary
• To confirm your continued interest in participating in the FarmerMoni programme
• To update and maintain accurate beneficiary records
• To send SMS notifications regarding your revalidation status
• To prevent fraud and ensure programme integrity
• To generate anonymized analytics for programme improvement
• To comply with legal and regulatory requirements

5. Data Protection and Security

We implement robust security measures to protect your personal data:

• Encryption: All data transmission is encrypted using industry-standard SSL/TLS protocols
• Access Control: Only authorized personnel have access to personal data
• Data Minimization: We only collect and display the minimum data necessary for revalidation
• Privacy by Design: Your full BVN is never displayed or logged; only the last 4 digits are used for verification
• Address Masking: Residential addresses are partially masked to protect your privacy
• Rate Limiting: We implement rate limiting to prevent brute-force attacks (maximum 5 failed attempts per 15 minutes)
• Audit Logging: All revalidation attempts are logged for security monitoring (using phone number hash for privacy)

6. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your information only in the following circumstances:

• Government Agencies: With relevant Nigerian government agencies for programme administration and oversight
• Service Providers: With trusted service providers who assist in SMS delivery and IT infrastructure (under strict confidentiality agreements)
• Legal Compliance: When required by law, court order, or regulatory authority
• Programme Partners: With authorized GEEP implementing partners for programme delivery

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations. Revalidation records are maintained for the duration of the FarmerMoni programme and for a period thereafter as required by Nigerian law for government records management.

8. Your Rights Under NDPR

Under the Nigeria Data Protection Regulation, you have the following rights:

• Right to Access: Request access to your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Object: Object to processing of your data for specific purposes
• Right to Data Portability: Request a copy of your data in a machine-readable format
• Right to Withdraw Consent: Withdraw your consent at any time (may affect programme eligibility)
• Right to Lodge a Complaint: File a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, please contact our Data Protection Officer using the contact information below.

9. SMS Communications

By completing revalidation, you consent to receive SMS notifications regarding your application status. We use secure SMS channels (including DND-enabled routes) for important programme communications. You may opt out of non-essential SMS communications by contacting support.

10. Cookies and Tracking Technologies

The revalidation portal uses session storage to temporarily store your information during the revalidation process. This data is cleared when you close your browser or complete the process. We do not use third-party tracking cookies or analytics tools that collect personal data.

11. Children's Privacy

The FarmerMoni Revalidation Portal is intended for adult beneficiaries (18 years and above). We do not knowingly collect personal information from individuals under 18 years of age.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify users of significant changes by posting a notice on the portal. Your continued use of the revalidation portal after such changes constitutes acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or wish to exercise your data protection rights, please contact us:

14. Nigeria Data Protection Commission

For complaints or inquiries regarding data protection compliance, you may contact: