At Chart Rounds, we respect your privacy. This Privacy Policy is governed under and in strict compliance with the Nigeria Data Protection Act (NDPA) of 2023 and enforced by the Nigeria Data Protection Commission (NDPC). It details how we collect, store, and process your personal data fairly, transparently, and lawfully.

We strictly process your personal data under the lawful bases outlined in the NDPA: primarily consent, the performance of a contract (to provide you the platform features), and our legitimate interest in securing and maintaining the community. We collect basic identity parameters (email, name, institution, state) purely to provide platform services.

Under the NDPA 2023, you hold comprehensive rights regarding your data. These include the right to access your data, the right to rectification if your data is wrong, the right to object to processing, and the right to data portability.

You have full control to permanently delete your data. By utilizing the "Delete account" option in your Profile, you initiate a complete, unrecoverable cascade erasure of your profile, authentication keys, comments, and votes. This complies entirely with the storage limits and erasure protocols in the NDPA.

We employ state-of-the-art encryption at rest and in transit. In the unlikely event of a security breach that risks your data, in accordance with the NDPA, we will notify the NDPC and affected users without undue delay, and no later than 72 hours where feasible.

We do not sell, distribute, or unethically transfer your personal data to non-essential third parties. Cross-border transfers of data, if occurring as a consequence of essential hosting infrastructure, adhere closely to adequate protection guarantees defined under Nigerian data sovereignty regulations.