Privacy Notice

1.1 Relationship to the Sproxil Privacy Policy

This Privacy Notice supplements the Sproxil, Inc. Privacy Policy published at sproxil.com/privacy-policy (the "Parent Privacy Policy"). The Parent Privacy Policy applies in full to your visit to snms.malariadata.net (the "Site"), except as supplemented below for processing that is specific to this Site. Where any provision of this supplement conflicts with the Parent Privacy Policy in connection with this Site, this supplement controls.

1.2 About this Site

snms.malariadata.net is operated by Sproxil, Inc. to publish aggregated findings from the Sproxil Nigeria Malaria Survey (SNMS), a continuous mobile-and-web-based survey of household-level malaria indicators across Nigeria.

Sproxil, Inc. is the data controller for processing carried out in connection with this Site. The contact point for data protection questions about this Site is: privacy@sproxil.com.

1.3 Personal data we process when you visit this Site

The following categories are processed when you visit:

• Server logs: IP address, browser type and version, operating system, referring URL, requested page paths, response codes, and timestamps. Retained for a maximum of 90 days for security monitoring, debugging, and aggregate performance analysis.
• Analytics telemetry: if analytics is enabled, anonymized session and page-view data may be collected by a third-party analytics provider (current provider listed in the Cookie Notice). Retention follows the provider's standard configuration; for Google Analytics this is currently 14 months.
• Cookies: a small number of essential and optional cookies are set as documented in the Cookie Notice for this Site.
• Request Access form: if you submit a request for expanded access via the Request Access form, we collect your full name, work email address, organisation, role, and the justification you provide. This data is used to evaluate and process your request, to contact you about approval, and to administer any access granted. It is retained for as long as your access remains active, plus a reasonable period thereafter for audit and security purposes (typically 24 months).

Account creation is not required to browse the public portions of this Site.

1.4 Respondent data displayed on this Site

The SNMS data displayed on this Site is aggregated. No individual SNMS respondent is identifiable from any chart, map, table, or value shown. The minimum cell size for any displayed statistic is 25 respondents; values below that threshold are suppressed. The lowest geographic resolution shown is the Local Government Area (LGA); no sub-LGA values are displayed.

Respondent consent is obtained at the start of every CATI (telephone) and CAWI (web) interview before any SNMS question is asked. Respondents may withdraw at any time during the interview. The full informed-consent script is available on request to snms-research@sproxil.com.

1.5 Legal bases for processing (NDPA 2023 and, where applicable, GDPR)

• Server logs are processed under legitimate interest, specifically the operator's interest in maintaining Site security and availability.
• Analytics telemetry is processed under consent obtained via the cookie banner, where consent is required by the visitor's jurisdiction.
• Aggregated SNMS data display is processed under legitimate interest in public health research transparency and, where applicable, in the public interest under the NDPA.
• Request Access form submissions are processed under legitimate interest in evaluating access requests, administering approved accounts, and maintaining an audit trail of who has been granted access to detailed data.

1.6 Recipients and cross-border transfers

This Site is hosted on infrastructure operated by Lovable (front-end) and Supabase (database backend), both of which may process data outside Nigeria. Sproxil maintains contractual data-processing arrangements with these providers. Cross-border transfers are conducted in accordance with the NDPA's adequacy and contractual safeguards requirements and, where GDPR applies, in accordance with Standard Contractual Clauses or equivalent mechanisms.

1.7 Your rights

To the extent the NDPA, GDPR, or other applicable law grants you rights as a data subject in connection with your visit to this Site, you may exercise the right of access, rectification, erasure, restriction of processing, objection, and complaint to a supervisory authority (the Nigeria Data Protection Commission for NDPA-covered data subjects, or your local supervisory authority for GDPR-covered data subjects). Direct requests to: privacy@sproxil.com.

1.8 Children

This Site is not directed at children. SNMS does not interview anyone under 15 years of age. No content on this Site is designed for child audiences.

1.9 Updates

This supplement may be revised from time to time. Material changes will be announced on the Site homepage for at least 30 days following publication. The "Effective" and "Last reviewed" dates at the top of this notice reflect the current version.