Loading
Last updated: November 2026
This Privacy Policy explains how the Abia Homecoming Organising Committee ("we", "the Committee") collects, uses, stores and protects your personal data when you use this platform, in line with the Nigeria Data Protection Act 2023 (NDPA).
The platform is operated by the Abia State Diaspora Commission and its organising committee for the Abia Global Diaspora Homecoming. The Media & Communications sub-committee is the first point of contact for privacy questions. You can reach them via the Contact page.
When you register we collect: your name, email address, phone number, country of residence and where you live now (state or province, city), your recognised union and membership status, ticket tier, and, if you request an invitation letter, the name it should be addressed to. We deliberately collect NO passport, visa or immigration data, and there is no payment data because the event is free.
Emergency contact, dietary requirements and accessibility needs are collected only if you choose to provide them AND give explicit consent. They are stored separately from your main record, are visible only to authorised staff on a need-to-know basis, and every access to them is logged.
Your data is used only to: verify your union membership and review your registration; issue your ticket, which appears in the app on the device you registered with and is never sent by email or WhatsApp; manage entry at the venue (check-in); produce your invitation letter if requested; keep aggregate, non-identifying statistics about the event; and contact you about your registration or essential event information. We do not sell your data or use it for third-party marketing.
We process registration data to take steps you request prior to attending the event and for the Committee's legitimate interest in organising a safe, well-run event. Sensitive data is processed only with your explicit consent, which you may withdraw by contacting us.
We count visits to this site (which pages are read, from which country and kind of device, and where visitors came from) without cookies and without storing your IP address. A short-lived code made from your address and browser by a one-way calculation, kept for two days and then deleted, lets us count a person once a day. The address itself is not stored. We do not count visitors whose browser asks not to be tracked. Only the totals are kept.
Alerts are off unless you switch them on, for one device at a time, from your account page. When you do, that device gives its browser's push address to the Push Hub, the notification service run by Kay, and to your browser maker's push service (Google, Mozilla or Apple, depending on your browser). It also gives the Push Hub a random code that stands for your account; the hub keeps only a one-way scrambled copy of it, and your browser maker never sees it. No name, ticket or announcement text goes with any of this. Whenever a device's push address is new to the Push Hub (when you switch alerts on, and now and then when your browser renews the address), the Push Hub sends that device a welcome message saying notifications are enabled; nothing of yours is in it. Otherwise an alert says only the name of the event and that there is something new for you in the app; you read the announcement after signing in. This lasts until you stop alerts on that device or sign out of it. If you stop alerts on all your devices, or sign out everywhere, you get a new random code and we ask the Push Hub to delete the old one, so it reaches nothing; if the Push Hub cannot be reached at that moment, the old address stays there, unused, until your browser drops it.
The QR code on your ticket contains only a cryptographically signed ticket reference. It contains no personal information.
Access is role-based and least-privilege: gate volunteers can only look up attendees for check-in; only authorised committee staff can view registrations; only administrators can access consent-gated sensitive data, and each such access is recorded in an audit log.
Registration data is kept for the duration of the event cycle. Consent-gated sensitive data is scheduled for deletion after the event ends. You may request earlier deletion at any time.
Under the NDPA you have the right to access, correct or delete your personal data, to withdraw consent, to object to or restrict processing, and to lodge a complaint with the Nigeria Data Protection Commission. To exercise any of these rights, contact the Media & Communications sub-committee via the Contact page.
Data is transmitted over HTTPS, staff access is authenticated and role-restricted, privileged actions are audit-logged, and your ticket is shown only in the app and its QR code is a credential. Please do not share a picture of it.
We may update this policy; the date above reflects the latest revision. Material changes will be announced on the platform.