1.1. Introduction

Nigeria House Davos is the national pavilion and programme representing Nigeria during the World Economic Forum 2026. We are committed to protecting the privacy and fundamental rights of individuals whose personal data we collect and process in connection with our website, online forms, registrations, accreditation, communications, and related activities. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we retain it, where it may be processed, and how you can exercise your rights. Our processing is subject to the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive (GAID), and we apply those standards as the primary legal framework for our operations.

1.2. Scope and application

This Policy applies to personal data we collect through our official Nigeria House Davos website and related digital services, and to personal data collected in connection with Nigeria House Davos activities (including registrations, media accreditation, partnerships, volunteer applications and event attendance). Where we provide tailored notices at the point of collection (for example on specific registration forms), those notices supplement and form part of this Policy.

1.3. What personal data we collect

We collect only the personal data necessary for the purpose at hand. Typical categories include: full name and contact details; organisation and job title; nationality and passport or ID details for accreditation; biography and photograph for name badges and promotional materials; dietary or accessibility requirements where volunteered; organisation logos or short company descriptions (for partners/sponsors); and technical metadata (IP address, device/browser details, timestamps) required for security and operational analytics. Where you supply optional information (e.g., a biography or photograph for public profiles), we will make clear the intended use and the retention period for that material.

1.4. How we use personal data and lawful bases

We use personal data for legitimate, specific purposes such as event registration and accreditation, communications about programme logistics, security and vetting checks, media and promotional activities (with consent where materials are public), and to operate and improve our website and services. In line with the NDPA and GAID, our lawful bases for processing include performance of an agreement (for registrations and contracted services), compliance with legal obligations (for security or immigration vetting), and our legitimate interests (for platform security, fraud prevention and event administration), always balanced against individuals’ rights and interests. Where we rely on consent (for example, publication of photographs or promotional use), you will be asked to give explicit, freely given consent and will be able to withdraw it at any time.

1.5. Cross-border processing and safeguards

We use cookies and similar technologies to enable essential site functionality, maintain security sessions, store user preferences, and collect aggregated analytics that help us improve the site. We will deploy a cookie consent mechanism that gives visitors the choice to accept or decline non-essential cookies before those cookies are set. Necessary cookies that are strictly required for the provision of services and the security of the website will be active by default; analytics, advertising and other non-essential tracking mechanisms will only run with your consent in jurisdictions where consent is required. Our Cookie Policy and cookie table (linked from the banner and footer) provide a full list of cookies, their purposes and retention periods.

1.6. Security of your data

We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include secure hosting, encryption in transit, role-based access controls, and contractual obligations on our processors to maintain appropriate safeguards. We review our measures periodically and update them in line with evolving threats and standards. In the unlikely event of a personal data breach that creates a risk to individuals’ rights and freedoms, we will notify the relevant supervisory authority and affected individuals as required under the NDPA and other applicable law.

1.7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to satisfy legal, regulatory and security obligations (including archival, audit and fraud-prevention needs), or to resolve disputes. Retention periods vary by data type: for example, registration and accreditation records may be retained for a defined period after the event to meet legal and security obligations; photographs or promotional materials will be retained only with consent and for the period communicated at the time of collection. Specific retention schedules are maintained internally and are available on request to demonstrate compliance with the NDPA.

1.8. Your rights

Subject to applicable legal limitations, you have rights in relation to your personal data. These include the right to request access to the personal data we hold about you; request correction of inaccurate data; request deletion where processing is no longer lawful or necessary; request restriction of processing in certain circumstances; object to processing on grounds relating to your particular situation (including for direct marketing); request portability of data where technically feasible; and withdraw consent where consent is the basis for processing. You also have the right to complain to the Nigeria Data Protection Commission (NDPC) or to another relevant supervisory authority if you consider your rights under applicable law have been infringed. To exercise your rights, please contact our DPO using the details below; we may request information to verify your identity before actioning requests.

1.9. Automated decision-making and profiling

Where we use automated processing or profiling tools (for example, automated vetting checks that assess security risk), you will be informed about the existence of such processing, its logic and the envisaged consequences for you, and you will be given a channel to request human review or to contest a decision where required by law. Automated processes that have a significant impact on individuals are subject to oversight, testing and human intervention procedures consistent with NDPA expectations.

1.10. Children and vulnerable persons

Nigeria House Davos is not intended for the participation of minors. We do not knowingly collect or process personal data of children under 18. Where data may involve vulnerable persons, we will apply enhanced safeguards and, where appropriate, request documentation to confirm the authority of any representative acting on another’s behalf.

1.11. Third parties and service providers

We engage third-party service providers to support registration systems, hosting, analytics, communications, identity verification and other operational needs. These providers act as data processors and process personal data only on our documented instructions; they are required to implement appropriate security measures and to contractually commit to meet NDPA standards. We do not permit third parties to use the data we provide for independent marketing purposes without your explicit consent.

1.12. International visitors and legal cooperation

Because Nigeria House Davos engages globally, data requests from foreign authorities, immigration or security agencies may arise. We will respond to lawful requests from competent authorities consistent with local law and the protections set out in this Policy and will, where permitted, notify the affected data subject and the Controller’s legal contact before disclosing data. Any such disclosures will be recorded and justified in our processing logs.

1.13. How to contact us

To exercise your rights, request information about our processing, or raise a concern, contact:

Izunna Ikenna (Data Protection Officer)

Address: 17d Musa Yar’adua street, Victoria Island, Lagos State,

Email: [email protected]

Where you are dissatisfied with our handling of a complaint you may lodge a formal complaint with the Nigeria Data Protection Commission (NDPC) or another competent supervisory authority in your jurisdiction.

1.14. Changes to this policy

We may update this Policy from time to time to reflect operational changes, legal developments, or improvements in our practices. Material changes will be communicated by posting a prominent notice on the Website and updating the “Effective date” at the top of this document.

1.15. Practical notes for registrants

When you register for an event or submit material to Nigeria House Davos we will: use your data to confirm your registration and provide event information; retain accreditation data for security and audit purposes; request your consent before publishing photographs or biographies; and give you an easy way to manage cookie preferences and to exercise your data subject rights.

Privacy & Data Protection