Privacy Statement

Website: ncaa.gov.ng 

1. Introduction

The Nigerian Civil Aviation Authority ("NCAA," "the Authority," "we," "us," or "our") is committed to protecting the privacy and personal data of visitors to our website (ncaa.gov.ng) and users of our online services. This Privacy Statement explains how we collect, use, disclose, store, and protect personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and applicable regulations issued by the Nigeria Data Protection Commission (NDPC).

By accessing or using this website, you acknowledge that you have read and understood this Privacy Statement.

2. Who We Are

The Nigerian Civil Aviation Authority is the apex regulatory body for civil aviation in Nigeria, established under the Civil Aviation Act. For the purposes of the NDPA, NCAA acts as the data controller in respect of personal data collected through this website.

If NCAA has appointed a Data Protection Officer (DPO), their contact details should be inserted here:

DPO Email:09055029506

3. What Personal Data We Collect

Depending on how you interact with this website, we may collect the following categories of personal data:

• Identity and contact data: full name, job title, organisation, email address, phone number, postal address
• Account and application data: information submitted through licensing, certification, permit, or registration forms (e.g., for airlines, airmen, aerodromes, or aviation personnel)
• Correspondence data: information you provide when contacting us via email, contact forms, or complaint channels
• Technical data: IP address, browser type and version, device information, operating system, and browsing behaviour on our site (via cookies and similar technologies)
• Employment and recruitment data: information submitted for job applications, if applicable
• Payment data: transaction references for fees paid for regulatory services (card/account details are typically processed by our payment processor, not stored by NCAA)

We do not knowingly collect sensitive personal data (e.g., health, biometric data) unless it is strictly necessary for a specific regulatory purpose (for example, medical certification of aviation personnel), in which case additional safeguards apply.

4. How We Collect Personal Data

We collect personal data when you:

• Fill out forms on this website (applications, complaints, feedback, subscriptions)
• Correspond with us by email, phone, or post
• Apply for licences, certificates, permits, or approvals
• Apply for employment with NCAA
• Browse the website (via cookies and analytics tools)

5. Purpose and Legal Basis for Processing

We process personal data for the following purposes, relying on the legal bases set out in Section 25 of the NDPA:

Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

6. How We Share Personal Data

We may share personal data with:

• Other government agencies (e.g., FAAN, NAMA, NiMet, NSIB) where necessary for aviation safety, security, or regulatory coordination
• International civil aviation bodies (e.g., ICAO) where required for treaty or regulatory obligations
• Service providers and contractors who support our IT systems, payment processing, or website hosting, under contractual confidentiality obligations
• Law enforcement or judicial authorities, where required by law

We do not sell personal data to third parties.

7. International Data Transfers

Where personal data is transferred outside Nigeria (for example, to cloud service providers or international aviation bodies), we ensure such transfers comply with Section 41 of the NDPA, including verifying that the receiving country has an adequate level of data protection or that appropriate safeguards (such as contractual clauses) are in place.

8. Cookies and Tracking Technologies

This website may use cookies and similar technologies to improve functionality, analyse traffic, and enhance user experience. You can control or disable cookies through your browser settings. Disabling cookies may affect the functionality of certain website features.

https://ncaa.gov.ng/cookie-policy

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Statement, or as required by law, regulation, or NCAA's records retention schedule. Regulatory and licensing records may be retained for extended periods due to statutory and safety-related obligations.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including access controls, encryption where appropriate, and staff training, in line with Section 39 of the NDPA.

11. Your Rights as a Data Subject

Under the NDPA, you have the right to:

• Be informed about how your personal data is processed
• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your personal data, subject to legal exceptions
• Object to or restrict certain processing activities
• Withdraw consent at any time, where processing is based on consent
• Data portability, where applicable
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, please contact us using the details in Section 2.

12. Children's Privacy

This website is not designed for or directed at children. We do not knowingly collect personal data from minors without appropriate parental/guardian consent, in line with Section 31 of the NDPA.

13. Complaints

If you believe your personal data has been processed unlawfully or your rights under the NDPA have been violated, you may lodge a complaint with:

14. Changes to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

15. Contact Us

If you have questions about this Privacy Statement or how your personal data is handled, please contact: