Legal

Privacy Notice

What we collect, why, who sees it, and your rights under the Nigeria Data Protection Act 2023.

Last updated: October 2026

1. Who we are

The data controller is the Community Advocacy Network for Women, Youth and Farmers ("CANWYF"), an Incorporated Trustee registered with the Corporate Affairs Commission, IT No. 7915762, 32 Orisumbare Street, Nova Road 6, Adebayo, Ado-Ekiti, Ekiti State, Nigeria. CANWYF decides why and how your personal data is used, and is responsible for it under the Nigeria Data Protection Act 2023 ("the Act").

The iTONA software is owned by Green Francis Limited and licensed to CANWYF. Green Francis Limited hosts and maintains the platform as our data processor: it may process personal data only on our documented instructions, may not use it for its own purposes, and has no ownership of it.

Contact for anything in this notice: info@canwyf.org (subject "Data protection").

2. Farmers and other enrolled participants

This section applies to farmers, processors, livestock keepers and other people enrolled on the iTONA platform by a CANWYF coordinator.

What we collect

Identity and contact: your name, phone number, gender, age band, photograph, village, community, local government area and chapter.
Your farm: the crops you grow, the GPS location and boundary of your plot, its size, soil and water source, how you hold the land, and photographs of the plot or of land documents if you choose to provide them.
Visits and harvests: the date and GPS location of each coordinator visit, photographs and voice observations taken during it, and the quantities and prices of harvests you report.
Your consent recording: a short recording of you giving your consent, in Ekiti Yoruba or English.
Identity number: if you give your National Identification Number, we store only a one-way code made from it, never the number itself. Because a short number can sometimes be recovered from such a code, we treat it as personal data and protect it accordingly.
Credential records: your iTONA reference, whether your credential is Provisional or Sealed, the dates of each, and a permanent log of every change: who made it, when and why.
Payment and family details held from an earlier version of the platform: a mobile money number, and the name, phone number and relationship of a family member you named. CANWYF no longer operates the wallet these were collected for. We are deleting them, and will not collect them again.

Why we use it, and on what basis

To enrol and verify you and keep your record: on the basis of your consent, given at enrolment.
To let anyone check your credential by its reference number (on canwyf.org/verify): your consent. The public check shows your name, village and community, chapter, gender and whether you are a young farmer, your main crop, your credential status and its dates, counts of visits, plots and harvests, and who recorded your records. It does not show your phone number, photograph, plot boundary, identity number or family details.
To introduce you to buyers through AgroMarket, if you list produce: your consent. A buyer sees your listing and reference; your phone number is shared with a buyer only if you agree.
To report what our programmes have done to funders and the public: legitimate interests, using totals and anonymised figures only. We do not give funders your personal details without your consent.
To keep the platform secure and to prevent fraud, including checking that visits took place where they were recorded: legitimate interests and legal obligation.

You may withdraw your consent at any time, by telling your coordinator, your chapter's Secretary, or us by email. Withdrawing does not affect anything done before you withdrew. If you withdraw, your credential will no longer be shown on public verification.

What enrolment never costs you

Enrolment, verification and use of the platform are free. CANWYF does not sell your data, and nobody may charge you for verification.

3. Website visitors, supporters and enquirers

Forms (joining, pledges, partnership enquiries): the name, email, phone, location and message you give us. Used to reply to you and keep a record of your enquiry or pledge, on the basis of your consent and our legitimate interests.
Donations by bank transfer: your name, the amount, the date and any reference you add, as shown on our bank statement, and your email if you write to us. Used to acknowledge your gift and keep proper accounts, as the law requires.
Site statistics: when you visit canwyf.org we record the page, the referring site, your device and browser type, your country, a random visitor identifier stored in a cookie, and a scrambled form of your IP address. Your IP address itself is not stored. To find your country once, your IP address is sent to a geolocation service, freeipapi.com, over an encrypted connection. Basis: legitimate interests in understanding how the site is used.
Farm Intelligence Portal: a location you search for or share is sent to the weather and map services that answer it (Open-Meteo, OpenStreetMap, ISRIC SoilGrids and NASA POWER) and is remembered only in your own browser. A photograph you submit to Plant Doctor is sent to Anthropic, the provider of the Claude AI model, to produce a diagnosis, and is not stored by CANWYF.
Fonts: pages load typefaces from Google Fonts, which receives your IP address when it serves them.

4. Who sees personal data

CANWYF staff and coordinators, only as far as their work needs.
Your chapter's Seal Council, who see the enrolment evidence for the members they vote on.
Green Francis Limited, as our data processor, under a written agreement.
Our hosting and email providers, who store or carry data on our behalf.
Buyers, only what you choose to share through AgroMarket.
Authorities, where the law requires it.

We do not sell personal data, and we do not share it with lenders, insurers or anyone else for their own purposes without your consent.

5. Transfers outside Nigeria

Some of the services named above (for example Google Fonts, Anthropic and the weather and map services) are based outside Nigeria. Where personal data goes outside Nigeria, we do so only as Part VIII of the Act permits, and we keep farmers' enrolment records with providers bound by written terms.

6. How long we keep it

Enrolment and credential records: for as long as you are a member, and for six years after you leave or withdraw, so that the credential history stays checkable and auditable. The permanent log of credential changes is kept for the same period.
Consent recordings: for as long as the consent they record is relied on.
Enquiries and pledges: two years after our last contact with you.
Donation records: as long as the law requires us to keep financial records.
Site statistics: two years.

7. Security

Data is sent over encrypted connections. Administrator accounts use two-step verification. Access is limited by role and logged. We keep daily backups, with access restricted. If a personal data breach is likely to put you at risk, we will tell the Nigeria Data Protection Commission within 72 hours and tell you without undue delay.

8. Your rights

Under the Act you can ask us to:

tell you what personal data we hold about you and give you a copy;
correct anything that is wrong or incomplete;
delete your data, or stop using it for a particular purpose;
give you your data in a form you can take elsewhere;
stop using it on the basis of our legitimate interests;
withdraw your consent.

Ask your coordinator or email us. We will answer within one month, free of charge. We may need to confirm who you are. Some records, such as the log of credential changes, cannot be altered, but we can add a correction or note to them.

If you are not satisfied, you may complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

9. Children

We enrol adults only. We do not knowingly enrol anyone under 18 or collect their data through this website.

10. Cookies

We set three cookies: a random visitor identifier and your country (each kept for a year, for site statistics), and a cookie that turns statistics off if you ask. The iTONA app also keeps your sign-in session in your browser. We use no advertising cookies.

11. Changes

We will update this notice when what we do changes. Farmers will be told of material changes at a chapter meeting.