Privacy Policy
Your trust and emotional safety are our highest priorities. This policy explains how Let's Talk collects, uses, and safeguards your information in compliance with the Nigeria Data Protection Act (NDPA) 2023.
Our Privacy Pledges
- Zero Commercial Sale: We never sell, monetize, or rent your personal information to third parties or advertising brokers.
- Safe Circle Privacy: Personal stories and emotional reflections shared inside peer circles are strictly confidential.
- Data Minimisation: We collect only the minimum data required to organize sessions, issue check-in passes, and safeguard community welfare.
1. Overview & Commitment
Let's Talk (“we”, “our”, or “us”) operates the community mental health support initiative in Katsina State, Nigeria, accessible via lets-talk.ng. We are committed to protecting the privacy, dignity, and autonomy of every participant, volunteer, partner, and website visitor.
This Privacy Policy is designed in strict compliance with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR), overseen by the Nigeria Data Protection Commission (NDPC).
2. Information We Collect
Depending on your interaction with Let's Talk, we collect the following categories of information:
A. Account & Registration Data
When you create an account or register for a round-table session (as a member or guest), we collect: Full name, email address, telephone number, age, gender (optional/prefer not to say), occupation, and emergency contact details.
B. Session Check-in & QR Pass Information
To manage session venue capacity and attendance tracking, we generate unique digital QR code passes. We log session check-in timestamps and attendance status.
C. Volunteer & Partner Applications
For volunteer applicants: skills, availability, background experience, and motivation statements. For partner organizations: organisation name, representative contact, sector type, and collaboration proposals.
D. Technical & Security Logs
Standard web server logs including IP address, browser type, device identifiers, and session cookies for secure authentication and rate-limiting against abusive access.
3. Non-Clinical Peer Support Scope
Let's Talk provides facilitated community peer support, mental health awareness, and psychoeducation circles. We do not provide clinical psychiatric diagnosis, prescription medication, inpatient hospital care, or 24/7 crisis emergency services.Participation in Let's Talk sessions does not create a physician-patient relationship.
4. How We Use Your Data
We use the information we collect solely for the following legitimate purposes:
- Reserving your seat and issuing check-in QR passes for mental health sessions.
- Sending essential session confirmations, venue updates, and security verification codes.
- Reviewing and processing volunteer applications and organisational partnership proposals.
- Maintaining venue health and emergency safety protocols during physical events.
- Aggregating anonymised, non-identifiable demographic statistics (e.g., total attendance counts) to measure community impact and present reports to public health stakeholders.
5. Lawful Basis for Processing
Under the Nigeria Data Protection Act 2023, we process personal data under the following legal bases:
- Consent: You provide explicit consent when creating an account, registering for sessions, or applying as a volunteer.
- Contractual / Programme Fulfillment: Necessary to manage your session reservation and check-in pass.
- Vital Interests: Emergency contact information may be used only if there is an imminent threat to life or physical safety.
6. Data Sharing & Third Parties
We do not sell, barter, or distribute your personal data. Data is shared exclusively under strict safeguards:
- Authorised Facilitators & Admins: Trained session coordinators access attendance lists solely for verifying admission at session venues.
- Infrastructure Service Providers: Trusted cloud hosting (e.g., Neon PostgreSQL, Vercel) and transactional email relays (Resend) operating under data processing agreements.
- Legal & Emergency Mandates: Where required by Nigerian law or to prevent imminent, severe bodily harm or suicide.
7. Data Security & Storage
We implement industry-standard administrative, physical, and technical controls:
- All web traffic is encrypted using modern TLS (HTTPS) in transit.
- Database tables are stored in secure, encrypted cloud environments with automated backups.
- Administrative access requires role-based authentication and strict audit logging.
- Passcodes and sensitive authentication credentials are salted and hashed using cryptographic standards.
8. Data Retention & Erasure
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory legal requirements. Guest registration tokens expire automatically following session completion. Registered participants can request account deactivation or total erasure at any time.
9. Your Rights Under NDPA 2023
As a data subject in Nigeria, you have guaranteed statutory rights:
Request a copy of the personal information we hold about you.
Update or correct inaccurate details via your dashboard profile.
Request the deletion of your account and personal history.
Opt out of notifications or cancel session participation at any time.
10. Contact Us & Data Protection Officer
If you have questions, inquiries, or wish to exercise your rights under this Privacy Policy, please contact our Data Protection Team: