NDPA 2023 Compliant
Privacy Policy
RCCG The Oasis — Workers in Training Portal
Last updated: 30 May 2026 • Effective immediately upon registration
Our Commitment to Your Privacy
RCCG The Oasis is committed to protecting your personal data in accordance with the
Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).
This policy explains what we collect, why, and your rights as a data subject.
1. Who We Are (Data Controller)
The data controller responsible for your personal information is:
- Organisation: RCCG The Oasis
- Programme: Workers in Training Portal
- Country: Nigeria
- Contact: Speak to your training coordinator or pastor for any data-related requests
2. What Personal Data We Collect
| Data Type | What We Collect | Why We Collect It |
|---|
| Identity | First name, last name | To identify you and appear on your certificate |
| Contact | Phone number, email (optional) | To log you in and send training materials |
| Registration | Registration number, reference number, join date | To track your batch membership |
| Attendance | Dates and sessions attended | To calculate your rate and issue your certificate |
| Technical | IP address, login times, activity log | For security and detecting unauthorised access |
| Profile photo | Photo (optional) | To display on your profile and certificate |
3. Legal Basis for Processing
- Consent — You actively agreed to this policy when registering
- Legitimate interest — Running the training programme requires your data
- Contractual — Issuing your certificate requires your identity data
4. Who Has Access to Your Data
Your data is accessible only to:
- Authorised admins of the RCCG The Oasis training programme
- Super admins who manage the portal
- Yourself — through your member dashboard
We do not sell, rent, or share your personal data with any third party, advertiser, or external organisation.
5. How We Protect Your Data
- All passwords are encrypted using bcrypt hashing — we cannot see your password
- The portal runs on HTTPS — all data in transit is encrypted
- Admin access is role-controlled — not all admins can see all data
- Sessions expire automatically after inactivity
- QR attendance codes rotate every 15 seconds to prevent misuse
- Google reCAPTCHA v3 is used on registration to prevent bot signups
6. How Long We Keep Your Data
- Active members: Data kept for the duration of the training programme
- Completed batches: Records retained for a maximum of 3 years for certificate verification
- Activity logs: Kept for 90 days, then may be cleared by admins
- Deleted accounts: Permanently removed within 30 days of deletion request
7. Your Rights Under NDPA 2023
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Correct any inaccurate or incomplete data in your profile
Right to Erasure
Request deletion of your account and personal data
Right to Object
Object to certain types of processing of your data
Right to Portability
Receive your data in a portable format (CSV/PDF)
Withdraw Consent
Withdraw your consent at any time by contacting your admin
To exercise any of these rights, speak to your training coordinator or use the Data Rights section in your member profile.
8. Cookies & Session Data
This portal uses session cookies to keep you logged in. These are essential for the portal to function and are not used for tracking or advertising. No third-party tracking cookies are used.
9. Changes to This Policy
We may update this policy from time to time. Continued use of the portal after changes constitutes acceptance of the updated policy.
10. Contact & Data Requests
To exercise your data rights, ask questions, or raise a privacy concern:
- Speak directly to your RCCG The Oasis training coordinator or pastor
- Use the Data Rights section in your member portal profile
If you believe your data rights have been violated, you may lodge a complaint with the
Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng