Please wait....

Privacy PolicyNational Single Window data privacy statement

NSW PLATFORM | PRIVACY NOTICE

NATIONAL SINGLE WINDOW (NSW) PLATFORM

PRIVACY POLICY

Issued by: NSW Secretariat | Version 1.0 | Effective Date: July 2026

Compliance Frameworks:
Nigeria Data Protection Act 2023 (NDPA) • General Application and Implementation Directive (GAID) 2025

1. WHO WE ARE

The National Single Window (NSW) Platform is a government-operated digital trade facilitation infrastructure managed by the NSW Secretariat under the Nigeria Revenue Service.

The NSW Platform serves as a unified electronic portal through which traders, importers, exporters, regulatory agencies, and other authorised stakeholders submit, process, and receive trade-related regulatory documentation, licenses, permits, certificates, and approvals.

The NSW Secretariat is committed to protecting the privacy, confidentiality, and security of all personal data and commercially sensitive information processed through the NSW Platform.

2. WHAT PERSONAL DATA WE COLLECT

Data Category Examples
Registration and Identity Data This includes information collected for user registration and verification on the NSW Platform. For individuals, it covers name, date of birth, nationality, passport details, address, email, and phone number...
Trade Transaction Data This comprises personal and commercial data generated during import and export processing...
Technical and Interaction Data IP address, device and browser details, operating system, login activity, session duration, pages accessed and audit logs...
Communications Data Platform messages, emails, support requests, complaints, feedback and responses.
Regulatory/Product Data Product registrations, risk classifications, inspection outcomes and regulatory decisions.
Other Relevant Trade Data Shipment details, container numbers, cargo manifests, Form M and supporting documents.

2.1 Sensitive Personal Data

The NSW Secretariat does not collect sensitive personal data as defined under Section 30 of the NDPA unless expressly required by applicable law or regulatory mandate.

3. WHY WE PROCESS YOUR DATA AND OUR LAWFUL BASIS

We only process personal data where we have a valid lawful basis under NDPA Section 25.

Processing Activity Lawful Basis (NDPA s.25)
Platform registration and account creation Legal Obligation
Identity verification and KYC/KYB checks Legal Obligation
Processing trade regulatory applications Legal Obligation
Routing applications to integrated regulatory agencies Legal Obligation
Payment processing for statutory fees and levies Legal Obligation
Platform security monitoring and access logging Legal Obligation
Maintaining audit trails and transaction records Legal Obligation
Sharing data with law enforcement authorities Legal Obligation
Generating trade statistics and analytics Legal Obligation / Legitimate Interest
Responding to data subject requests Legal Obligation
Data breach investigations Legal Obligation
DPIAs and compliance administration Legal Obligation
Technical support and complaint resolution Legitimate Interest
Operational notifications and alerts Legal Obligation / Legitimate Interest
Marketing and informational communications Consent
Retention beyond active processing period Legal Obligation
Automated risk profiling and screening Legal Obligation

4. WHO WE SHARE YOUR DATA WITH

We share personal data only where necessary for regulatory processing or as required by law.

  • Integrated Regulatory Agencies – NAFDAC, NESREA, NAQS, NIMASA, NSC, NCS, CBN, FAAN and SON.
  • Payment Processors – approved gateways integrated with the NSW Platform.
  • Government Oversight Bodies – NDPC, auditors and supervisory authorities.
  • Law Enforcement & Courts – pursuant to valid legal or statutory requirements.

We do not sell, rent, or commercially exploit personal data. All third-party processors are bound by data protection agreements consistent with the NDPA and GAID.

5. INTERNATIONAL DATA TRANSFERS

We do not transfer your personal data outside Nigeria. All data processed through the NSW Platform is hosted and stored on Nigerian-domiciled infrastructure.

6. HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as necessary for the purposes collected or as required by law.

Data Category Retention Period Legal Basis / Justification
Registration and Identity Data 10 Years CBN AML/CFT Regulations 2022, CAMA 2020, CITA Section 63
Trade Transaction Data 10 Years CAMA 2020 and CITA Section 63
Technical and Interaction Data 10 Years CBN AML/CFT Regulations and Money Laundering Act
Communications Data 10 Years CBN AML/CFT Regulations and Money Laundering Act
Regulatory/Product Data 10 Years CAMA 2020 and CITA Section 63
Other Relevant Trade Data 10 Years Public Interest and Economic Policy Purposes

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.

7. YOUR RIGHTS AS A DATA SUBJECT

Under the NDPA 2023 and GAID 2025, you have the following rights:

S/N Right
1Right to be Informed
2Right of Access
3Right to Rectification
4Right to Erasure (Right to be Forgotten)
5Right to Restriction of Processing
6Right to Object
7Right to Withdraw Consent
8Right not to be Subject to Automated Decision Making
9Right to Issue Standard Notice to Address Grievance (SNAG)

8. COOKIES

The NSW Platform uses cookies to enable essential functionality and improve your experience.

Exercise your rights via: dpo@nsw.gov.ng or use the Privacy Rights Request form available on the NSW website.

Cookie Type Category Purpose Legal Basis
JSESSIONID Session Cookie Necessary Used for session management within a J2EE application. Contractual, Legitimate Interest
MYSESSIONID Session Cookie Necessary Maintains user identification and session state. Contractual, Legitimate Interest

Strictly necessary cookies cannot be disabled because they are essential to the operation of the NSW Platform.

9. HOW WE PROTECT YOUR DATA

We prioritise your privacy and use advanced technical measures to protect your data. While no online platform is entirely foolproof, we are dedicated to safeguarding your information against loss, misuse and unauthorised access.

10. DATA BREACHES

In the event of a personal data breach that poses a risk to your rights, we will notify the NDPC within 72 hours and where the risk is high, notify affected individuals as soon as practicable.

11. AUTOMATED DECISION-MAKING

The NSW Platform uses automated risk-screening tools to prioritise or flag trade applications. No adverse decision affecting you will be made solely through automated means without human review. You have the right to request a human review of any automated decision.

12. CONTACT US

Organisation National Single Window Secretariat, Nigeria Revenue Service
Address NSW Secretariat, 7th Floor, 26 Sokode Crescent, Wuse Zone 5, Abuja
DPO Email w.gov.ng"> dpo@nsw.gov.ng
Website https://www.nsw.gov.ng www.nsw.gov.ng
Phone  

If you are not satisfied with our response to a rights request or complaint, you have the right to escalate directly to the Nigeria Data Protection Commission (NDPC).

13. UPDATES TO THIS NOTICE

We review this Notice at least annually.

Where material changes are made, we will notify registered users via the NSW Platform or by email at least 30 days before changes take effect.

The current version is always available at: www.nsw.gov.ng/privacy-policy

Continued use of the NSW Platform after the effective date of an update constitutes acceptance of the revised Notice.

This Notice was approved by the Director, NSW Secretariat on July 14, 2026.