Privacy and Data Protection Statement

Introduction

Cephas Health Research Initiative Inc. (“Cephas”, “we”, “our”, or “us”) is committed to safeguarding the privacy and protection of all personal data collected, stored, and processed in the course of our research, partnerships, and institutional operations.

As a responsible research and public health organization registered in Nigeria, Cephas adheres to the principles and provisions of the Nigeria Data Protection Act (NDPA) 2023, and other applicable international data protection standards.

This Privacy and Data Protection Statement explains how we collect, use, store, and protect personal information obtained through our website, research activities, forms, training programs, and collaborations.

Scope of this Statement

This policy applies to all individuals and organizations who engage with Cephas, including:

• Research participants
• Staff, interns, and fellows
• Institutional collaborators and partners
• Event and training participants
• Visitors to our website

Principles of Data Protection

Cephas upholds the following key data protection principles:

1. Lawfulness, Fairness, and Transparency– Data is collected and processed legally and transparently.
2. Purpose Limitation– Personal data is collected only for legitimate, specific, and clearly stated purposes.
3. Data Minimization– Only data relevant and necessary for a given purpose is collected.
4. Accuracy– We ensure personal data is accurate and regularly updated.
5. Storage Limitation– Personal data is retained only as long as necessary for its intended purpose.
6. Integrity and Confidentiality– Data is securely stored and protected from unauthorized access, alteration, or disclosure.

What Data We Collect

Depending on the nature of your engagement with Cephas, we may collect:

• Personal information(e.g., name, contact details, institutional affiliation)
• Demographic data(e.g., age, gender, region)
• Professional or academic background(for recruitment and partnerships)
• Research data(for studies, surveys, and scientific collaboration)
• Digital identifiers(such as cookies or analytics data when visiting our website)

How We Use Your Data

Cephas uses personal data only for legitimate institutional purposes, including:

• Conducting research and scholarly activities
• Managing collaborations, training, and recruitment
• Communicating research outcomes and organizational updates
• Maintaining legal, ethical, and administrative compliance
• Enhancing user experience on our website and digital platforms

We do not sell, rent, or trade personal data under any circumstances.

Lawful Basis for Processing Data

Cephas processes personal data under the lawful bases outlined in the Nigeria Data Protection Act (NDPA) 2023, including:

• Consent:When individuals voluntarily provide data through forms, surveys, or registrations.
• Contractual necessity:When processing is required to fulfill an agreement (e.g., partnership, fellowship).
• Legal obligation:When data processing is required to meet regulatory or ethical obligations.
• Legitimate interest:When processing supports Cephas’s research and operational goals in a manner that does not override individual rights.

Data Sharing and Transfers

Cephas may share personal data only when necessary for:

• Research collaborations (with prior ethical approval and data sharing agreements)
• Compliance with legal, regulatory, or ethical obligations
• Partnerships with trusted academic or research institutions

When data is transferred outside Nigeria, Cephas ensures that adequate safeguards are in place, in line with the NDPA 2023 and global best practices.

Data Retention and Storage

Cephas retains personal data only for as long as it is necessary to fulfill the purpose for which it was collected, or as required by law, funding agencies, or ethical committees.
All data is securely stored using encryption, access controls, and institutional confidentiality protocols.

Data Subject Rights

Under the Nigeria Data Protection Act (NDPA) 2023, individuals have the right to:

• Access their personal data
• Request rectification of inaccuracies
• Withdraw consent at any time
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Request data portability

Requests can be made via email to: info@cephashri.org.

Data Security

Cephas employs robust administrative, technical, and physical safeguards to protect data against unauthorized access, misuse, loss, or destruction. Our systems use secure servers, encrypted data transfer protocols (SSL), and strict user authentication for internal access.

Third-Party Links

Our website may contain links to external websites. Cephas is not responsible for the privacy practices or content of such third-party sites and encourages visitors to review their respective privacy statements.

Updates to this Statement

Cephas reserves the right to update or amend this Privacy and Data Protection Statement as necessary to reflect legal, regulatory, or operational changes.
All updates will be published on our website.

Contact Us

For questions, concerns, or data-related requests, please contact: info@cephashri.org.