Data Retention & Deletion Policy

How long we keep your data, and how it is deleted.

Policy version v1.3-2026-11 · Applies under the Nigeria Data Protection Act 2023 (NDPA).

Retention periods

Data	Kept for
Member records and photos	Until 12 months after the 2027 general elections conclude, or until you ask us to delete them — whichever is sooner.
Consent records	For as long as the related member record exists, to prove lawful processing.
Ideas and enquiries	24 months from submission.
Data correction/deletion requests	24 months after resolution.
Rate-limit counters (hashed IPs)	24 hours.
Audit logs	36 months; they are append-only and cannot be edited.

When you request deletion (or an administrator deletes a record), the record is soft-deleted: immediately hidden from administrators' lists, exports and statistics, and your access link stops working.
An automated job permanently purges soft-deleted records daily once they are 30 days old. The grace period lets us reverse mistaken deletions.
Your photo is removed from storage immediately at soft-delete. Graphics are generated on demand and never stored.

Use the Correct or Delete My Data form. We aim to respond within 30 days.

Join Forward Kaduna