Who we are
Our website address is: https://www.thecarnelian.ng. The Carnelian is committed to safeguarding the privacy of our visitors and customers in accordance with the Nigeria Data Protection Act (NDPA) 2023. For the purpose of data protection laws, we are the Data Controller.
Comments
When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to assist in spam detection.
Publicity: Once your comment is approved, your profile picture is visible to the public in the context of your comment.
Gravatar Service: An anonymized string (hash) created from your email address may be provided to the Gravatar service. Their privacy policy is available here: https://automattic.com/privacy/.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
We use cookies to enhance your experience. In compliance with the NDPR and GDPR, we require your explicit consent for non-essential cookies.
Editor Cookies: If you edit or publish an article, a cookie indicating the post ID is saved for one day.
User Convenience: If you leave a comment, you may opt-in to saving your name, email, and website in cookies. These last for one year.
Authentication: If you visit our login page, we set a temporary cookie to determine if your browser accepts cookies. It contains no personal data and is discarded when you close your browser.
Session Management: When you log in, we set cookies to save your login info (2 days) and screen display choices (1 year). If you select “Remember Me“, your login persists for two weeks.
Embedded content from other websites
Articles on this site may include embedded content (e.g., videos, images, articles). This content behaves exactly as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction, especially if you have an account and are logged in to that website.
Who we share your data with
We do not sell your data. We only share it when necessary:
Legal Obligations: We may disclose data if required by Nigerian law or the Nigeria Data Protection Commission (NDPC).
Password Resets: If you request a password reset, your IP address will be included in the reset email.
Service Providers: We may use third-party processors (e.g., email services, cloud hosting) who are contractually bound to protect your data under Standard Contractual Clauses (SCCs).
How long we retain your data
Comments: Comments and their metadata are retained indefinitely for automated approval of follow-up comments.
User Profiles: For registered users, we store the personal information provided in their user profile.
General Data: We retain other personal data only as long as necessary for the purposes outlined in this policy or to comply with legal, tax, or reporting requirements.
What rights you have over your data
Under the NDPA 2023, you have the following rights:
Objection: Object to the processing of your data for direct marketing.
Access & Portability: Request an exported file of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure (Right to be Forgotten): Request that we erase your personal data (excluding data we must keep for legal or security purposes).
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
Where your data is sent
Spam Detection: Visitor comments may be checked through an automated spam detection service.
Cross-Border Transfers: If your data is transferred outside Nigeria, we ensure it is to a jurisdiction with adequate data protection laws or protected by NDPC-approved safeguards.
Contact Information
For any privacy-related inquiries or to exercise your rights, please contact our Data Protection Officer at: [email protected]