Privacy Policy

This policy applies to prospective members creating an account, verified members using the member area (directory, elections, jobs, events and notifications), and visitors who submit the public contact form.

It does not cover third-party sites we link to, such as our social media pages, which have their own privacy practices.

We collect information in three ways: what you give us directly, what is generated as you use the platform, and what other verified members can see about you once your membership is approved.

Account and academic information

• Full name, email address, phone number and date of birth
• Department, programme (ND, HND or Part-Time), graduation set and matriculation number
• Chapter affiliation
• A password, which is stored in hashed form and is never visible to us
• Optionally, a profile photo and a LinkedIn profile URL

Verification and membership status

Whether your account has been approved by an administrator, your membership status, and, where applicable, the reason an application was declined. Payment status for annual dues is recorded against your profile so that we know whether your membership is current.

Payments

Payments are made inside the FPA Alumni mobile app and cover three things: annual membership dues, voluntary donations to Association causes, and the alumni clearance fee. For each payment we record the amount, the date, a payment reference, and what the payment was for. Where you pay the clearance fee, we also generate a clearance certificate containing your name, matriculation number and phone number.

We never see or store your card details. These are collected directly by our payment processor within its own secure checkout, and it returns only a confirmation and a reference to us.

Activity on the platform

• Messages you submit through the public contact form, including name, email, subject and message
• Job postings you apply to, and any details or documents submitted with an application
• Events you RSVP to, and votes you cast in Association elections
• Notifications sent to you, and a device push-notification token if you enable notifications

Technical information

Standard technical data generated by your browser or device, such as the session identifiers needed to keep you signed in. We do not operate third-party advertising or analytics trackers on the website or in the mobile app, and we do not collect location data, contacts or advertising identifiers.

• To create, verify and administer your membership account
• To operate the member directory, elections, job board, events and news available to verified members
• To process payments for dues, donations and clearance, and to issue receipts and clearance certificates
• To send you service messages, including verification and approval emails, election notices, event and job updates, and any notifications you have enabled
• To respond to messages submitted through the contact form
• To detect, investigate and prevent fraud, abuse or breaches of our Terms of Service
• To meet the legal, regulatory and record-keeping obligations of an alumni association

We do not sell your personal data, and we do not use it to serve third-party advertising.

We process personal data under the Nigeria Data Protection Act 2023 on the following bases:

• Consent, which you give when you create an account, enable push notifications, or choose to display your name alongside a donation. You may withdraw consent at any time, as described in Section 11.
• Contract, where processing is necessary to provide the membership services you have signed up for, including verifying your membership and processing your payments.
• Legal obligation, where we are required to retain financial or membership records.
• Legitimate interests, in running the Association, maintaining accurate records, and protecting the platform and its members from fraud and abuse. We weigh these interests against your rights and freedoms.

We share personal data only where it is necessary to run the Association and this platform.

• Other verified members. Your directory entry, consisting of your name, department, programme, graduation set, chapter, profile photo and any LinkedIn URL you provide, is visible to signed-in verified members. It is not visible to the public or to search engines. Your email address, phone number and date of birth are never shown in the directory.
• Association administrators and executives, for verifying membership, moderating content, and administering elections, events and jobs.
• Service providers acting on our behalf. Supabase provides our database, authentication and hosting. Brevo sends our account, approval and notification emails. Paystack processes payments made in the mobile app. Expo delivers push notifications to your device.
• Law enforcement or regulators, where we are legally required to disclose information, or where disclosure is necessary to protect the rights, property or safety of the Association or its members.

We do not share personal data with third parties for their own marketing purposes.

Our database, authentication service and file storage are hosted by Supabase in a data centre in Ireland. Our email and payment providers may also process data outside Nigeria.

This means your personal data is transferred to and stored in a country outside Nigeria. We rely on the contractual protections offered by these providers, and on the data protection regime applicable in the country of storage, to safeguard your information. By using the platform you acknowledge that your data will be processed outside Nigeria on this basis.

If you would like more detail about the safeguards that apply to these transfers, contact us using the details in Section 14.

Votes cast in Association elections are recorded against your member account so that duplicate voting can be prevented and results can be certified.

Published results show aggregate vote counts for each candidate. Individual vote choices are never published and are never shared with candidates. However, because votes are stored against your account for the purposes above, they are technically visible to Association administrators with database access. Elections conducted on this platform should therefore be understood as auditable rather than fully anonymous.

The website uses cookies and browser storage only where they are necessary for the platform to work. These keep you signed in between pages, remember your session, and hold small interface preferences such as a selected filter.

The mobile app stores your session securely on your device using the operating system's protected storage.

We do not use cookies for advertising, cross-site tracking or third-party analytics. Because the cookies we set are strictly necessary for the service, disabling them in your browser will prevent you from signing in.

We keep your account and membership records for as long as your account is active, and for a reasonable period afterwards so that we can maintain accurate Association records, resolve disputes and meet our legal obligations.

Financial records relating to dues, donations and clearance payments are retained for as long as required by law and by the Association's accounting obligations. Where an account is deleted, these records are kept in a form that no longer identifies you.

Contact form messages and election records are retained for as long as needed for the purpose for which they were collected.

We protect personal data using row-level access controls in our database, so that a member's own record is readable only by that member and by administrators, and directory information is readable only by signed-in verified members. Passwords are hashed and are never stored or visible in plain text. Payment card details never reach our systems.

Access to administrative functions is restricted to Association administrators, and actions that affect membership status or finances are carried out through controlled server-side processes rather than directly from a member's device.

No system is perfectly secure and we cannot guarantee absolute security, but we work to protect your information against unauthorised access, alteration and loss. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission and affected members as required by law.

Under the Nigeria Data Protection Act 2023 you have the right to access, correct, delete and restrict the processing of your personal data, to object to processing, and to receive a copy of the data you provided to us.

• Access and correction. You can review and update your name, phone number, profile photo and notification preferences yourself while signed in. Institutional details such as your department, programme, graduation set, chapter and matriculation number are fixed at registration and changed only by an administrator, so that membership records remain accurate. Contact us if any of these is wrong.
• Deletion. You can delete your account directly in the mobile app, under Profile, at any time. This removes your profile, photo, directory entry, RSVPs and notifications. Records of payments you have made are retained for accounting purposes with your name removed, as described in Section 9. You may also request deletion by contacting us.
• Notifications. You can turn off individual notification categories in the app under Profile and Notification Settings, and you can disable notifications entirely from your device settings. Messages about the outcome of your membership application are always sent, because without them you would not know whether you had been approved.
• Directory visibility. Only verified signed-in members can see the member directory. Guests and search engines cannot.
• Withdrawing consent. Where we rely on your consent, you may withdraw it at any time. This does not affect processing carried out before you withdrew it.

To exercise any of these rights, contact us using the details in Section 14. We will respond within a reasonable time and may need to verify your identity first.

This platform is intended for alumni of the Federal Polytechnic, Ado-Ekiti and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time as the platform evolves. We will revise the "last updated" date at the top when we do, and we will tell members about material changes through the platform or by email.

Questions about this policy or about your personal data can be sent to alumni@fedpolyado.edu.ng, submitted through our contact page, or posted to the Alumni Secretariat, Federal Polytechnic, Ado-Ekiti, Ekiti State, Nigeria.

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Nigeria Data Protection Commission.