Privacy Policy

PRIVACY POLICY

Effective Date: October 10, 2026
Last Updated: October 15, 2026

1. Introduction

The Financial System Innovation Centre (FSIC) is committed to respecting your privacy and protecting the personal information entrusted to it through its website and related digital engagement channels.

This Privacy Policy explains how personal information is collected, used, stored, disclosed, retained, and protected when you access the FSIC website, submit an enquiry, participate in an innovation intake process, register for an event, access digital resources, or otherwise engage with FSIC through its online platforms.

We are committed to handling personal information responsibly, transparently, and in accordance with the Nigeria Data Protection Act 2023 and other applicable data-protection laws and requirements.

By explaining our practices clearly, this Policy aims to help website visitors, innovators, businesses, financial institutions, partners, programme participants, and other stakeholders understand how their information is handled and the rights available to them.

2. Scope of This Policy

This Policy applies to personal information processed through the official FSIC website and associated digital services operated by or on behalf of FSIC, including, where applicable:

Website browsing and access to published information, reports, news, announcements, and knowledge resources.

Contact forms, enquiries, feedback, and support requests.

Innovation intake submissions, participation applications, and related correspondence.

Event registrations, programme participation, and related communications.

Newsletter subscriptions and other communications to which users have subscribed.

Photographs, video recordings, and other media collected or published in connection with FSIC activities.

Website analytics, cookies, security logs, and related technical information.

This Policy should be read alongside any additional privacy notice presented for a specific programme, event, application, or service. Where a separate notice applies to a particular activity, it will explain any additional processing associated with that activity.

3. Information We May Collect

The categories of information collected depend on how you interact with the website and which services you use.

3.1 Personal and Contact Information

When you contact FSIC, register for an event, or submit a form, we may collect information such as:

Full name.

Email address and telephone number, where requested.

Organization or business name.

Job title, professional role, or organizational affiliation.

Other contact details voluntarily provided in your correspondence.

3.2 Innovation Intake and Application Information

Individuals or organizations submitting an innovation proposal, participating in a programme, or requesting structured engagement may be asked to provide information such as:

Organization name and legal status, where applicable.

Name and role of the person responsible for the submission.

Innovation title, thematic area, and problem statement.

Solution overview, intended beneficiaries, and target users.

Product development stage, operating model, and technology overview.

Information concerning data use, consumer protection, cybersecurity, operational risks, and relevant compliance controls.

Existing licences, registrations, or regulatory status, where applicable.

Specific questions, engagement requests, supporting documents, and related correspondence.

Applicants should provide information that is relevant to their submissions and avoid uploading unnecessary personal information, highly confidential material, or sensitive information about other individuals.

3.3 Technical and Website Usage Information

When you visit the website, certain technical information may be recorded automatically by the website, hosting provider, or security and analytics tools, where enabled. This may include:

Internet Protocol (IP) address.

Browser type, device type, and operating system.

Pages visited, approximate access times, and referral information.

Website performance, error reports, and security-related events.

Cookie identifiers and other online identifiers, depending on your browser settings and the technologies deployed.

This information may be used to maintain website functionality, investigate technical problems, improve the user experience, and protect the website from abuse or unauthorized access.

3.4 Event and Media Information

For events, meetings, conferences, and related activities, FSIC may process registration details, participation records, photographs, video recordings, or other media, as appropriate and subject to applicable requirements.

Where identifiable individuals are recorded or their images are intended for publication, appropriate notices, permissions, or other lawful grounds will be considered as required by the circumstances.

3.5 Information From Other Sources

Where lawful and relevant to a specific engagement, FSIC may receive information from an authorized organizational representative, programme partner, service provider, or other legitimate source.

We will consider the applicable legal requirements and the context in which such information was obtained before processing it.

4. Why We Process Personal Information

FSIC may process personal information for the following purposes, where applicable:

Website administration: To operate, maintain, secure, and improve the website and its services.

Enquiry management: To receive, investigate, respond to, and follow up on questions, requests, complaints, or feedback.

Innovation engagement: To receive, screen, review, organize, and route innovation submissions and related requests to the appropriate personnel or authorized reviewers.

Programme and event administration: To manage registrations, participation, event communications, and related activities.

Stakeholder communication: To communicate relevant updates, publications, opportunities, and announcements in accordance with your preferences and applicable requirements.

Security and fraud prevention: To detect and investigate suspected misuse, malicious activity, unauthorized access, or other security concerns.

Legal and governance requirements: To maintain appropriate records, address lawful requests, and meet applicable legal, regulatory, accountability, or institutional obligations.

Monitoring and improvement: To evaluate website performance, identify recurring issues, improve accessibility, and assess engagement using appropriate information and safeguards.

We will not use personal information for a purpose that is incompatible with the purpose for which it was collected unless an applicable legal basis or other lawful justification permits the additional processing.

5. Lawful Basis for Processing

FSIC will identify an appropriate lawful basis for each relevant processing activity in accordance with applicable data-protection law.

Depending on the nature of the activity, that basis may include:

Consent: Where you have freely and validly consented to a specified processing activity.

Performance of a contract or steps requested before entering into a contract: Where processing is necessary for an applicable contractual relationship or requested pre-contractual steps.

Legal obligation: Where processing is necessary to comply with an applicable legal requirement.

Public interest or official authority: Where the responsible institution has the relevant lawful mandate and the processing meets the applicable requirements.

Legitimate interests: Where this basis is legally available and the relevant interests do not override applicable rights and protections.

The applicable basis will depend on the particular activity. Providing information through a website form does not automatically mean that every possible use of that information has been consented to.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal, and it does not prevent processing that may continue on another lawful basis.

6. Disclosure and Sharing of Information

FSIC does not intend to sell personal information to third parties.

Where necessary and lawful, personal information may be disclosed to:

Authorized FSIC personnel and relevant internal teams responsible for handling your enquiry, application, submission, or participation.

Website hosting providers, technology vendors, email delivery services, security providers, and other service providers engaged to support website operations.

Authorized programme partners, professional advisers, or reviewers where their involvement is necessary for a relevant activity and sharing is lawful.

Relevant public authorities or competent institutions where required or permitted by law or by a valid institutional mandate.

Other parties where you have provided valid consent or another lawful basis permits the disclosure.

Service providers receiving personal information on our behalf will be engaged subject to appropriate contractual, confidentiality, security, and data-protection arrangements, as applicable.

We will seek to limit disclosures to information reasonably necessary for the relevant purpose.

7. International Transfers of Personal Information

Some website infrastructure, hosting services, communications tools, or other service providers may process information outside Nigeria.

Where personal information is transferred internationally, FSIC will apply the requirements of applicable Nigerian data-protection law, including any required adequacy assessment, safeguards, contractual protections, or other lawful transfer mechanism.

Where applicable, further information concerning an international transfer and the safeguards used may be obtained by contacting the designated privacy contact.

8. Data Retention

Personal information will be retained only for as long as reasonably necessary to fulfil the purpose for which it was collected, meet applicable legal or institutional obligations, manage relevant engagements, resolve disputes, and maintain appropriate records.

Retention periods may differ depending on whether information relates to a general enquiry, innovation submission, event registration, contractual matter, security log, or other activity.

When information is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable retention and record-management requirements, unless continued retention is lawfully required.

9. Data Security

FSIC will take appropriate technical and organizational measures, proportionate to the nature of the information and the risks associated with its processing, to protect personal information against unauthorized access, accidental loss, destruction, alteration, disclosure, or misuse.

Depending on the relevant system and service, safeguards may include access controls, authentication, secure hosting, encryption, backups, staff or contractor confidentiality obligations, and security monitoring.

No website, electronic communication, or storage system can be guaranteed to be completely secure. Users should exercise care when transmitting information online and should avoid submitting unnecessary sensitive or highly confidential material through general-purpose website forms.

Where an applicable personal-data breach occurs, FSIC will take appropriate steps to investigate, contain, and address it and will make any notifications required by applicable law.

10. Your Data-Protection Rights

Subject to the conditions, exceptions, and limitations established by applicable law, you may have the right to:

Be informed about the processing of your personal information.

Request access to personal information held about you.

Request correction of inaccurate or incomplete information.

Request erasure of personal information where the legal requirements for erasure are satisfied.

Request restriction of processing in circumstances provided by law.

Object to certain processing activities where an applicable right to object exists.

Request data portability where the legal conditions for portability are satisfied.

Withdraw consent where processing relies on consent.

Challenge certain decisions based solely on automated processing where applicable.

Lodge a complaint with the Nigeria Data Protection Commission or another competent authority, where applicable.

These rights are not absolute and may be subject to applicable legal requirements, exemptions, record-retention duties, and the rights of other individuals.

To exercise a right or submit a privacy-related request, contact the privacy contact identified in Section 15. We may request reasonable information to verify your identity and clarify your request before taking action.

11. Cookies and Similar Technologies

The FSIC website may use cookies and similar technologies to support essential website functions, remember user preferences, maintain security, and, where enabled, understand website usage or measure performance.

Cookies may be classified as:

Strictly necessary cookies: Required for core website functions, security, or services requested by the user.

Preference cookies: Used to remember selected settings or preferences.

Analytics cookies: Used, where enabled, to understand website traffic and improve performance.

Other optional cookies: Used only where appropriate and in accordance with applicable requirements and the choices presented to users.

Where consent is legally required for non-essential cookies or similar technologies, the website should provide an appropriate consent mechanism.

You may be able to manage cookies through your browser settings or the website's cookie-preference controls. Disabling certain cookies may affect some website functions.

The cookies and tracking technologies actually deployed on the FSIC website should be reflected in a current cookie inventory and, where appropriate, a separate cookie notice.

12. Third-Party Websites and Services

The FSIC website may contain links to external websites, online platforms, embedded resources, or third-party services.

Those services may operate under separate privacy policies and terms of use. FSIC does not control the privacy practices of independent third parties merely because a link or embedded resource appears on our website.

You should review the applicable privacy information before submitting personal information directly to an external website or service.

13. Photographs, Videos, and Published Media

FSIC may publish photographs, videos, and related media to document events, share institutional activities, communicate developments, or provide public information.

Where published media identifies you and you have a privacy concern, you may contact FSIC using the details in Section 15. We will assess the request in accordance with applicable law, relevant permissions, the context of publication, and any legitimate archival, public-interest, or institutional considerations.

14. Children's Personal Information

The FSIC website and innovation intake facilities are intended primarily for stakeholders engaging with financial system innovation, institutions, businesses, professionals, and related programmes. They are not designed specifically to solicit personal information from children.

Where the processing of a child's personal information arises, FSIC will apply the requirements and safeguards prescribed by applicable law. Information concerning children should not be submitted unless it is relevant, lawful, and appropriately authorized.

15. Privacy Contact and Complaints

For privacy-related questions, requests to exercise data-protection rights, or concerns about the handling of personal information, please contact:

Responsible Institution / Data Controller: [Insert Verified Legal Name]
Privacy or Data Protection Contact: [Insert Designated Officer or Unit]
Email Address: [Insert Official Privacy Email Address]
Postal Address: [Insert Official Institutional Address]
Telephone: [Insert Official Contact Number, if applicable]

Please include sufficient details to enable us to understand and respond to your request. Avoid including passwords, unnecessary identity documents, or other sensitive information in an initial email.

You may also contact the Nigeria Data Protection Commission through its official website at https://ndpc.gov.ng/ where applicable.

16. Changes to This Privacy Policy

FSIC may update this Policy to reflect changes in law, institutional requirements, website functionality, technology, or data-processing practices.

The current version will be published on the FSIC website with its revision date. Where a material change requires additional notice or consent under applicable law, appropriate steps will be taken.

We encourage users to review this Policy periodically.

17. Interpretation

This Policy is intended to explain FSIC's personal-information handling practices transparently. It should be read in conjunction with applicable law and any additional notice governing a particular FSIC service, programme, or engagement.

If any provision of this Policy is inconsistent with a mandatory requirement of applicable law, the applicable legal requirement will prevail to the extent of the inconsistency.