Privacy, and what the NDPA requires us to tell you.

vecrid Record monitors public radio broadcasts in Nigeria and logs the adverts it hears. Broadcasts are public by nature; an advert is a company speaking to everyone within range. The record is about organisations and their advertising, not about listeners.

Today the service holds personal data in exactly two places, and both exist because you gave it to us:

• Correction and removal requests. The email address you supply, plus what you wrote. Kept so we can answer you and show what was asked. See corrections.
• Operational logs. Request logs carry an IP address for rate limiting. They never carry email addresses — the logger strips anything that looks like one, as a backstop rather than a promise.

We do not run advertising trackers, we do not sell data, and searching the record does not require an account.

The Nigeria Data Protection Act gives you the right to ask what we hold about you, to have it corrected, and to have it erased. The route for all three is the same and needs no account: file a request. You do not have to be the subject to report an error.

One boundary worth stating plainly, because it is the question that actually arises: we will not delete a record of an airing because someone dislikes it. A broadcast happened in public, and other people’s settlement statements rely on it. We will correct an airing that is wrong, and we will remove personal data. Those are different questions and we answer them differently.

Raw stream recordings are deleted on a rolling schedule. Short clips of an advert, and the clip proving a specific airing, are kept indefinitely because they are the evidence a disputed statement is settled by — the point of the service is that a claim can be played back rather than argued about.

Data protection questions, and requests to see, correct or erase what we hold, all go through the same form. No account is needed, and you will get an answer either way.