MetHubs.
MetHubs.
NDPR & Global Compliance Framework

Institutional Privacy Policy

How MetHubs Technologies collects, safeguards, and processes institutional workshop, attendance verification, and monitoring evaluation data across government ministries, development partners, and enterprises.

Effective Date: September 1, 2026
Nigeria Data Protection Regulation (NDPR) Compliant
Section 1

1. Scope & Institutional Commitment

MetHubs Technologies (“MetHubs”, “we”, “us”, or “our”) operates a cloud-based institutional programme intelligence, capacity-building verification, and monitoring and evaluation (M&E) platform. This Privacy Policy governs all personal data, institutional telemetry, and assessment records processed through our web portal, participant portals, and administrative dashboards.

Our institutional clients—including Ministries, Departments, and Agencies (MDAs), international multilateral donors, non-governmental organisations (NGOs), and commercial enterprises—act as Data Controllers under the Nigeria Data Protection Act (NDPA) and applicable international standards. MetHubs processes attendee and workshop data strictly as a Data Processor in accordance with institutional mandate.

Section 2

2. Information We Collect

To guarantee the integrity of high-stakes capacity-building programmes and eliminate ghost participant registrations, MetHubs collects the following categories of data:

Participant Identity Data

Full official legal name, government employee or staff ID, ministry/organisation, department, duty station, professional email, and phone number.

Roll-Call Telemetry

Real-time GPS coordinates captured during physical hall QR check-in, check-out timestamps, and device browser session fingerprints.

Assessment Scores

Pre-test submissions, post-test answers, knowledge gain percentiles, daily module ratings, and digital certificate verification serials.

Institutional Tenant Data

Organization profiles, programme budgets, facilitation rosters, state coverage maps, and executive monitoring logs.

Section 3

3. GPS Geofencing & Anti-Proxy Verification

MetHubs operates a proprietary geofenced roll-call mechanism to verify physical presence inside designated training halls.

Geofencing Privacy Safeguard

We never track participant locations in the background. GPS coordinates are requested and recorded solely at the exact moment a participant scans the session QR roll-call or signs out. Coordinates are evaluated solely to calculate proximity to the verified venue radius.

Section 4

4. Diagnostic Testing & Scorecard Analytics

Pre-test and post-test diagnostic evaluations are processed to compute aggregate programme capacity metrics (the “MetHubs Impact Score”). Individual test results are held confidential to the respective participant, their designated institutional programme lead, and accredited M&E officers. Scores are never sold or exposed across distinct institutional tenants.

Section 5 • Powered by EXWHYZEE

5. Nigerian Data Sovereignty & NDPR Compliance • Powered by EXWHYZEE

MetHubs is engineered and powered by EXWHYZEE, fully compliant with the Nigeria Data Protection Act (NDPA 2023) and the Nigeria Data Protection Regulation (NDPR) administered by the Nigeria Data Protection Commission (NDPC).

  • In-Country Hosting Option: Dedicated enterprise and MDA workspaces may elect local cloud data residency within tier-3 Nigerian data centres powered by EXWHYZEE sovereign cloud infrastructure.
  • Strict Purpose Limitation: Information collected for institutional capacity building is not processed for commercial advertising or secondary monetization.
  • Tenant Isolation: Multi-tenant workspaces use cryptographic tenant isolation to ensure zero cross-institution data bleed.
  • Infrastructure Security: All sovereign security architectures, penetration testings, and encryption protocols are powered and audited by EXWHYZEE.
Section 6

6. Information Sharing & Disclosures

We do not sell, rent, or lease participant personal data. We disclose information only under the following strict circumstances:

  • To the Sponsoring Institution: The deploying MDA, NGO, or development partner receives attendance audits, scorecard analytics, and certificate rosters.
  • Infrastructure Service Providers: Trusted cloud compute and SMS gateway providers (e.g. transactional verification SMS dispatch) under strict confidentiality agreements.
  • Statutory & Legal Mandates: Where required by valid subpoenas, court orders, or statutory regulatory bodies operating within the Federal Republic of Nigeria.
Section 7

7. Data Retention & Certificate Verifiability

Attendance logs and test scores are maintained for the active lifecycle of the institutional programme contract plus 7 years for statutory audit trails and public M&E verification. Digital certificates issued on MetHubs remain verifiable via their unique public QR hash indefinitely, or until formally revoked by the issuing institution.

Section 8

8. Individual & Tenant Rights

Under the Nigeria Data Protection Act, registered participants and tenant administrators hold the following actionable rights:

Right of Access & Portability: Request an export of your historical attendance records and certified scorecards in structured PDF or CSV format.
Right to Rectification: Request correction of misattributed names or ministry affiliations through your organization administrator.
Right to Erasure: Request deletion of obsolete workshop telemetry subject to mandatory statutory donor audit retention requirements.
Section 9

9. Technical & Operational Security Safeguards

MetHubs implements defense-in-depth protocols:

  • Encryption at Rest & in Transit: TLS 1.3 encryption across all network transmissions and AES-256 block encryption on persistent database disks.
  • Role-Based Access Control (RBAC): Granular permissions restricting M&E data access to designated focal leads.
  • Audit Logging: Immutable tamper-evident logging of every login, grade export, and attendance override.
Section 10

10. Contacting Our Data Protection Officer (DPO)

For regulatory inquiries, Data Subject Access Requests (DSAR), or institutional compliance audits, please contact our legal and data governance team:

Office of the Data Protection Officer — MetHubs Technologies Ltd

Federal Capital Territory, Abuja, Nigeria
Email: dpo@methubs.com
Regulatory Reference: Nigeria Data Protection Commission (NDPC) Compliance Registry