CSRiseCSRise

NDPR compliance

Data protection officer

A named person, not a shared inbox. You can also go straight to the regulator without contacting us first, and we will not treat that as a hostile act.

Bisi Adewale

Data protection officer · appointed March 2024

dpo@csrise.africa · 0700 000 0000

Reports toThe board, not the chief executive
Response target2 working days
Statutory window for a request30 days
Our median4 days

What to bring here

  • A request for everything we hold on you, or a correction to it.
  • A deletion request, including one we have partly refused and you disagree with.
  • An objection to a particular use of your data.
  • Your name appearing in a project’s evidence when you never signed up to CSRise.
  • A concern that something was published about you or your community without consent.
  • A suspected data incident, however small and however uncertain you are.

Most of this does not need a person

Export, correction, deletion, consent withdrawal and analytics opt-out are all in your own privacy settings and take effect immediately. The DPO exists for what those controls cannot resolve — not as a gate in front of them.

If you are named in someone’s evidence

You may be on an attendance register or in a photograph submitted to prove a milestone. You never agreed to anything with us, and you still have full rights. Write here with roughly where and when, and we will find it. You do not need a reference number.

Going over our heads

You can complain to the Nigeria Data Protection Commission directly, at any point, without exhausting anything with us first. That is your right and pointing it out is part of this job.

Incident registerEvery data incident CSRise has had is listed publicly, including the ones nobody outside would have noticed. Two are recorded for 2026, both reported to the regulator within 72 hours. Read the privacy policy