Privacy notice
1Introduction
This Privacy Policy explains how we collect, use, share and protect personal data when you visit or use the 3MTT Delivery Network Cohort 5 Partner Application Portal at delivery.3mtt.gov.ng (the “Portal”). It applies to visitors, to people who apply on behalf of an organisation, and to anyone whose details are included in an application.
We process personal data in line with the Nigeria Data Protection Act 2023 (“NDPA”) and the General Application and Implementation Directive 2025 issued by the Nigeria Data Protection Commission.
2Who we are
The Portal is operated for the Three Million Technical Talent (3MTT) programme by the Federal Ministry of Communications, Innovation and Digital Economy (“we”, “us”, “our”). We are the data controller for the personal data described in this policy.
3Information we collect
Information you give us
- Sign-in details: your work email address and the one-time codes we send to verify it.
- Organisation details: legal name, CAC registration number, organisation type, year established and head office address.
- Contact persons: the name, role, email address and phone number of your primary contact and any secondary contact.
- Consortium details: for consortium applications, each member’s legal name, CAC number, role and contact email.
- Track record and delivery plan: training tracks, numbers of learners, outcomes reached, job demand, delivery locations, training model and proposed costs.
- Facility and programme details: facility and branch locations, seating capacity, equipment, power and internet set-up, facilitators, programmes and learner numbers.
- Documents and photos: evidence of outcomes (such as offer letters, contracts or tracker exports), curricula, supporting documents, and photos of your facility, including geo-tagged photos that contain location data. These may include personal data about learners, staff or employers.
- Preferences: the resources you would like through the Enabled Partner value bundle.
- Correspondence: messages you send us and our replies.
Information collected automatically
- Technical data: IP address, browser and device type, date and time of access, and error logs.
- Saved progress: information stored in your browser so you can save your application and continue later (see section 9).
Information from others
- Details of your organisation provided by a consortium lead.
- Information we obtain when verifying your application, such as confirmation from employers or references you name.
4How we use your information
We use personal data only for the purposes below, each with a legal basis under section 25 of the NDPA.
| Purpose | Legal basis |
|---|---|
| Create and secure your account and send one-time sign-in codes | Performance of a task in the public interest |
| Save your progress and let you resume your application | Performance of a task in the public interest |
| Assess eligibility, score applications, and arrange interviews and site visits | Performance of a task in the public interest |
| Contact you about your application, key dates and the outcome | Performance of a task in the public interest |
| Verify information and prevent fraud or duplicate applications | Performance of a task in the public interest |
| Prepare partnership agreements with selected organisations | Steps taken at your request before entering a contract |
| Keep records for audit, oversight and legal claims | Compliance with a legal obligation |
| Keep the Portal secure and working properly | Our legitimate interests |
| Report to programme funders and match applications to funding windows | Compliance with a legal obligation |
If you include personal data about other people, such as learners, staff, contacts or consortium members, you must be entitled to share it with us and should let them know how it will be used. Please share only what is needed and remove details we do not need.
5How we share your information
- Programme staff and authorised reviewers who assess applications.
- State Programme Managers, who coordinate interviews and site visits in your state.
- Other Ministries, Departments and Agencies of government, and organisations performing government functions, where needed to carry out our statutory mandate or deliver the programme.
- Service providers who host the Portal, store data and send emails on our behalf. They act only on our instructions and under contracts that protect your data.
- Consortium members, who can see information in a consortium application they are part of.
- Programme funders and development partners, where needed for programme oversight, reporting or audit. Where possible, we share information in aggregated form that does not identify individuals.
- Regulators, law enforcement, auditors or courts, where required by Nigerian or applicable international law, or for crime prevention and risk management.
- Coordination partners contracted by the programme.
6International transfers
Some of our service providers or partners may process personal data outside Nigeria. When this happens, we make sure the transfer is allowed under sections 41 to 43 of the NDPA. For example, the destination may have adequate data protection laws, or the recipient may be bound by contractual safeguards.
7How long we keep your information
We keep personal data only for as long as we need it for the purposes in this policy, then delete or anonymise it.
| Information | Retention period |
|---|---|
| One-time sign-in codes | Expire after 15 minutes |
| Applications started but not submitted | Deleted immediately after the application window closes |
| Applications not selected or withdrawn — Funded Partners | 6 months after the outcome is communicated, unless needed for a legal claim or moved to the Enabled pathway, where performance is reviewed over time for funding opportunities |
| Applications and records of selected partners | For the length of the partnership, plus 5 years for audit purposes |
| Applications not selected or withdrawn — Enabled Partners | 6 months after the outcome is communicated |
| Technical and security logs | 90 days for routine technical logs; 12 months for security logs, or longer if needed for an investigation or legal claim |
8How we protect your information
We hold your information securely and protect it with physical, technical and administrative safeguards to reduce the risk of loss, misuse, unauthorised access, disclosure and alteration. These include firewalls, data encryption, physical access controls to data centres, and access authorisation controls so that only authorised officers can view applications.
The Portal uses Transport Layer Security (TLS) to encrypt data sent between your device and our servers. You should see a padlock symbol in your browser’s address bar, and the web address will begin with https://. We also follow recognised information security management standards to prevent data privacy breaches.
You also have a part to play. Keep your one-time sign-in codes and access to your email account confidential, and do not share them with anyone. We may disable access to an application if we believe sign-in details have been misused. If you know or suspect that someone else has accessed your application, notify us promptly at programs@3mttnigeria.com.
9Cookies and similar technologies
The Portal does not use advertising or analytics cookies.
- Sign-in cookie: when you sign in, we set a strictly necessary cookie that keeps you signed in. It is not used for advertising or analytics.
- Local storage: we store your application progress and sign-in status in your browser’s local storage, so you can save your work and continue later. This is strictly necessary for the service you request. It stays on your device until you clear your browser data. If you use a shared computer, clear your browsing data when you finish.
- Readiness check: answers to the 30-second readiness check are processed in your browser only. They are not sent to us or stored.
If we introduce any non-essential cookies in future, we will ask for your consent first.
10Your rights
Under the NDPA, you have the right to:
- ask whether we hold personal data about you and request a copy;
- ask us to correct data that is inaccurate, out of date or incomplete;
- ask us to delete data we no longer need or have no lawful basis to keep;
- ask us to restrict how we use your data while a request or objection is being considered;
- object to how we use your data;
- withdraw consent at any time, where we rely on consent;
- not be subject to decisions based solely on automated processing that significantly affect you;
- receive your data in a structured, machine-readable format, where this right applies.
To exercise any of these rights, email our Data Protection Officer at programs@3mttnigeria.com. We may ask you to verify your identity. We aim to respond within 30 days, and we do not normally charge a fee.
Applications are assessed by people. We do not make decisions about applications based solely on automated processing.
11Children
The Portal is intended for organisations and their adult representatives. It is not directed at anyone under 18. If you upload evidence relating to learners under 18, please remove their names and personal details first.
12Links to other websites
The Portal contains links to other websites, including our LinkedIn and X pages. We are not responsible for, and have no control over, websites outside our domain. We do not monitor or review their content, and opinions or materials on those websites are not necessarily shared or endorsed by us. We are not responsible for their privacy practices. Please read the privacy statement of any website you visit, and consider its security and trustworthiness before sharing personal information with it.
13Changes to this policy
We may amend this policy at any time by posting a revised version on this page. The revised version takes effect 7 days after publication. If we make significant changes, we will also notify applicants by email.
14Contact us and complaints
If you have a question or concern about how we handle your personal data, contact our Data Protection Officer at programs@3mttnigeria.com or write to No. 1181 Aguiyi Ironsi Street, Maitama, Abuja, FCT, Nigeria.
If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission:
15Governing law
This Privacy Policy is made pursuant to the Nigeria Data Protection Act 2023, the General Application and Implementation Directive 2025, and other relevant Nigerian laws, regulations and international conventions applicable to Nigeria. Where any provision of this policy is inconsistent with a law, regulation or convention, that provision is subject to the overriding law, regulation or convention.