WEBSITE PRIVACY NOTICE

1. Overview

This Privacy Notice provides information on how FCT-IRS collects and processes your personal data when you visit our website and other related platforms (“Site”). It sets out what we do with your personal data and how we keep it secure and explains the rights that you have in relation to your personal data.

2. Who We Are

Federal Capital Territory Internal Revenue Service (“FCT-IRS”, “Service”, “we”, “us” or “our”) came into being vide the FCT Internal Revenue Service Act of 2015 and is the  only “State” Internal Revenue Service in the Country, established by the National Assembly.

The Agency is empowered by the Federal Legislature to administer tax and non-tax revenues accruable to the Federal Capital Territory, and is thus responsible for the collection of all the taxes collectible by a state government in accordance with the Taxes and Levies (approved List of Collection) Act of 1998 As Amended.

The Service is also responsible for the coordination of collection of all other revenues accruable to the Federal Capital Territory.

3. Nature of Personal Data We Collect and Process

FCT-IRS collects the following personal data directly from you when you register your personal details on our Site:

• contact details such as your full name, postal addresses, phone numbers and email addresses;
• demographic information such as your date of birth and gender;
• online registration information such as your password and other authentication information;
• payment details such as your credit card information and billing address; and
• in certain cases, your marketing preferences.

We automatically collect and store certain types of information regarding your use of our Site including information about your searches, views, downloads and purchases.

4. Cookies 

Cookies enables us to distinguish you from other users of our website, which helps us to provide you with an improved browsing experience. For more information about cookies and how we use them, please read our Cookie Policy by clicking this link.

5. Use of Your Personal Data

We may use your personal data collected on our Site:

• to register and onboard you as a new user.
• to process and respond to your needs on our platform.
• to manage your relationship with us.
• to improve our website functionalities, products and services.
• to comply with our legal and regulatory obligations, including verifying your identity where necessary.
• to prevent, detect and manage risk against fraud and illegal activities.

• any other purpose that we disclose to you in the course of providing products and services to you.

6. Legal Basis for the processing of Your Personal Data 

We are committed to ensuring that we legally process your personal data in our custody.

FCT-IRS shall only process your personal data if at least one of the following conditions apply:

• you have given your consent to the processing of his/her personal data for one or more specific purposes;
• the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which FCT-IRS is subject;
• processing is necessary in order to protect your vital interests or that of another natural person;
• processing is necessary for the purpose of the legitimate interest pursued by FCT-IRS, or by a third party to whom the data is disclosed subject to certain conditions; and
• processing is necessary for the performance of a task carried out in the public interest or in exercise of official public mandate vested in FCT-IRS.

7. Sharing of Your Personal Data with Third-Parties

We may need to share your personal data with third-parties under the following circumstances:

1. to enable provide our services to you, end to end.
2. to analyze data, provide marketing assistance, process payments, transmit content, and provide customer service.
3. to comply with applicable laws and regulations or to respond to valid legal process, including from law enforcement or other government agencies.
4. to protect the rights of our customers, operate and maintain the security of our systems and network to ensure the preservation of life and property and prevention of fraud and cyberattack.
5. to protect the rights or property of FCT-IRS or others, including enforcing our agreements, terms, and policies.

8. Transfer of Personal Data Abroad

FCT-IRS shall implement appropriate safeguards to ensure the security of personal data to be transferred to a foreign country in compliance with the provision of the Nigeria Data Protection Act 2023 (“NDPA”) and the Nigeria Data Protection Regulation 2019 (“NDPR”) or any other applicable data protection legislation. In particular, we shall, among other things, enter into Data Processing Agreements with the recipients of such personal data in the foreign country to ensure protection of your personal data.

Where personal data is to be transferred to a recipient in a foreign country deemed to have inadequate data protection laws, FCT-IRS will take all necessary steps to ensure that informed consent is obtained from you, and you are aware of the risks inherent including ensuring that personal data is transmitted in a safe and secure manner.

9. Data Security and Retention

We take the security of your personal data in our possession seriously. In line with our commitment to protect your personal data in our possession, we have developed appropriate organizational, technical and physical measures to protect the personal data you provide, or we collect against unauthorized access, loss or theft, as well as against any risk of loss, disclosure, copying, misuse or modification. Such measures include but are not limited to the use of secure servers, firewall, multiple factor authentication security, data anonymization and pseudonymization (as may be necessary), data encryption and granting access on a need-to-know basis only to employees in order to perform their job responsibilities.

FCT-IRS will only retain your personal data under the following circumstances:

• as long as reasonably necessary for the purpose of providing our services to you; and
• for the period needed to comply with our legal and statutory obligations under applicable law.

10. What are Your Rights in relation to our Collection and Processing of your Personal Data

Users of our Site are entitled to exercise the following rights in relation to their personal data collected and processed by FCT-IRS:

• right to withdraw consent in relation to the processing of their personal data;
• right to be informed regarding their personal data;
• right to request for and access any personal data collected and stored by FCT-IRS;
• right to request the deletion of their data;
• right to be informed about appropriate safeguards in place where data is transferred abroad;
• right to request rectification of personal data which is stored by FCT-IRS;
• right to request the transmission of data from FCT-IRS to a third party (right to the portability of data);
• right to object to automated decision making and processing;
• right to object to direct marketing;
• right to request the processing of their information; and

11. Review of our Privacy Notice

We may need to review and make necessary updates, modifications or amendments to our Privacy Notice to ensure compliance with applicable data protection legislations including the NDPA and NDPR or as a result of changes in our systems and processes arising from the use of technology. We will notify you of any material changes in the way we collect and process your personal data on our Site by placing a notice online or via email. Your continuous use of our services after such notice, will be construed as your consent to carry on with the processing of your personal data.

12. Dispute Resolution and Complaint Handling Mechanism

In line with our objective of creating a rewarding customer experience on our website and mobile application, FCT-IRS has developed a dispute resolution and complaint handling process to ensure the effective management and timely resolution of all complaints relating to this Privacy Notice. In the event that you have any complaint regarding this Privacy Notice, please send us an email via DPO’s email address. We will investigate and work towards ensuring the prompt resolution of all disputes and complaints relating to the use and disclosure of personal data in line with the provisions of the NDPA and the NDPR.

In the event that the outcome of the resolution of your complaint is unsatisfactory, you are at liberty to lodge a complaint to the Nigeria Data Protection Commission (NDPC).

13. Contact Details of our Data Protection Officer (DPO)

In the event that you have any questions or inquiries relating to the collection and processing of your personal data on our Site or the exercise of your rights as a data subject under the NDPA and NDPR, please send an email to our DPO via email at dpo@fctirs.gov.ng.