Privacy Notice
Effective date: 18 August 2026 · Version 1.0
1. Who we are
The Nigerian Indigene Management and Certification System (NIMCS) is operated for participating government authorities by Haigha Tech ("we", "our"). The participating government authority is the data controller; Haigha Tech acts as processor/service provider, except for data Haigha processes independently for its own legitimate administrative purposes.
2. What we collect
When an indigene is registered, we collect:
- Identity data: NIN, names, date of birth, sex, marital status, nationality and photograph;
- Place of origin: state, LGA, district (optional), ward, village/community unit and hometown;
- Contact and residence details;
- Family information: parents, guardian (where required) and next of kin; and
- Supporting documents used to establish indigene status.
3. Why we process it
Personal data is processed to operate the official indigene register, route applications through LGA approval, issue verifiable indigene certificates and maintain the audit trail required by law. The lawful basis is the performance of a task carried out in the public interest or in the exercise of official authority, with consent or other lawful authority captured where applicable.
4. How we protect it
- NIN is encrypted and masked by default; it never appears in URLs, QR codes, exports, notifications or logs;
- Access is role-based and restricted to each user's assigned LGA;
- Sensitive data access requires permission and a reason, and is recorded;
- Public verification shows only the minimum attributes needed to validate a certificate.
5. Your rights
Under the Nigeria Data Protection Act 2023 you may request access to, rectification of, restriction of or objection to processing of your personal data, and data portability or erasure where applicable. Submit a request through the staff portal or via the support channel below.
6. Retention
Records are retained for the period justified by law and the official function of the register, after which they are safely disposed of in line with the documented retention schedule, unless a legal hold applies.
7. Contact
Data Protection Officer: dpo@haighatech.com
Support: support page