CSRise

NDPR compliance

Data protection officer

You can reach our designated Data Protection Office or go straight to the regulator without contacting us first, and we will not treat that as a hostile act.

Data Protection Office

Privacy & Regulatory Compliance Team

dpo@csrise.africa

Reports toThe board, not the chief executive
Response target2 working days
Statutory window for a request30 days
Our median4 days

What to bring here

  • A request for everything we hold on you, or a correction to it.
  • A deletion request, including one we have partly refused and you disagree with.
  • An objection to a particular use of your data.
  • Your name appearing in a project’s evidence when you never signed up to CSRise.
  • A concern that something was published about you or your community without consent.
  • A suspected data incident, however small and however uncertain you are.

Most of this does not need a person

Export, correction, deletion, consent withdrawal and analytics opt-out are all in your own privacy settings and take effect immediately. The DPO exists for what those controls cannot resolve — not as a gate in front of them.

If you are named in someone’s evidence

You may be on an attendance register or in a photograph submitted to prove a milestone. You never agreed to anything with us, and you still have full rights. Write here with roughly where and when, and we will find it. You do not need a reference number.

Going over our heads

You can complain to the Nigeria Data Protection Commission directly, at any point, without exhausting anything with us first. That is your right and pointing it out is part of this job.