Privacy Policy

Data Collection

We collect:

  • Author/Reviewer Data: Names, emails, affiliations, ORCID IDs, and payment details (for APCs)
  • Reader Data: Institutional IP addresses, download metrics (anonymised)
  • Website Analytics: Cookies for session management via Matomo (self-hosted, no Google Analytics)

Legal Basis & Purpose

Data is processed to:

  • Facilitate peer review (contractual necessity)
  • Disseminate research (legitimate interest)
  • Comply with tax laws (legal obligation)

Data Sharing

  • Publicly Visible: Author names, affiliations, and published work
  • Confidential: Reviewer identities (double-blind system)
  • Third Parties: Only trusted partners (Crossref for DOIs, Portico for archiving) under strict DPAs

Data Retention

  • Active Accounts: Until deletion request
  • Published Articles: Indefinitely (scholarly record preservation)
  • Financial Records: 7 years (tax compliance)

Your Rights

Under GDPR/other laws, you may:
✅ Access your personal data
✅ Request correction/deletion
✅ Withdraw consent (where applicable)
✅ Object to processing
→ Contact: [team.gshh@cecr.com.ng]

Security Measures

  • Encryption (TLS 1.3 for data transit, AES-256 for storage)
  • Regular security audits
  • Role-based access control

International Transfers

Data may be transferred globally but only to:

  • Countries with adequacy decisions (e.g., EU, UK)
  • Partners with SCCs (Standard Contractual Clauses)
  1. Data Processing Flowchart for Authors

Authors Data Processing Flowshart

Policy Updates

Changes notified via:

  • Journal homepage banner (30 days prior)
  • Direct email to registered users

Contact

Data Protection Officer
[Name], [team.gshh@cecr.com.ng]

Last Updated: [30/04/2025]