How we handle
your data

The Akwa Ibom State Internal Revenue Service ("AKIRS") operates the IbomTax Tax Management System ("TMS" or "Platform") to administer tax obligations in Akwa Ibom State, Nigeria.

We are committed to handling your personal data responsibly, transparently, and in accordance with the Nigeria Data Protection Act (NDPA) 2023 and the NDPA General Application and Implementation Directive (GAID) 2025.

This Policy applies to all individuals who register on, access, or interact with the IbomTax platform — including individual taxpayers and corporate entities. By using this platform, you acknowledge that you have read and understood this Policy.

To deliver tax management services, we collect the following categories of personal data:

• Full name, date of birth, and gender
• Phone number and email address
• Nationality and government-issued identification numbers (NIN / BVN)
• Tax Identification Number (TIN)
• Residential and business address
• Occupation, employer name, and business sector
• Proof of residency documents
• Company registration details (corporate taxpayers)
• Platform usage data and support correspondence

We process your personal data solely for the following purposes:

Taxpayer Registration

To verify your identity and create your taxpayer profile on the platform.

Tax Assessment & Compliance

To calculate, assess, and administer your tax obligations under applicable Akwa Ibom State laws.

Payment Facilitation

To generate payment references and redirect you securely to the Akwa Remit payment portal.

Legal & Regulatory Compliance

To comply with federal and state tax legislation, court orders, and directives from regulatory authorities.

Platform Improvement

To analyse anonymised usage patterns and improve platform security and functionality.

Service Communications

To issue tax notices, respond to enquiries, and provide important platform updates.

Under the NDPA 2023, all processing of your personal data is grounded in at least one of the following lawful bases:

Legal Obligation

Applicable tax statutes require AKIRS to collect and process taxpayer data.

Public Interest

Processing is necessary for the exercise of our official mandate as the state revenue authority.

Contractual Necessity

To fulfil obligations arising from your registration on the platform.

Consent

Where no other lawful basis applies, we obtain your explicit consent before processing.

The NDPA 2023 grants you the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection Officer at contactus@akirs.ak.gov.ng. We will respond within 30 days.

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data where it is no longer legally required.

Right to Withdraw Consent

Withdraw consent at any time where processing is consent-based.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing that may cause undue harm or distress.

Right to Restriction

Request limited processing while a complaint is being resolved.

Right to Complain

Lodge a complaint with the Nigerian Data Protection Commission (NDPC).

We do not sell your personal data or share it for commercial marketing purposes. Disclosure occurs only in the following circumstances:

Akwa Remit

Payment reference data is shared with Akwa Remit solely to process your tax payments.

Regulatory Authorities

Data may be disclosed to FIRS, NDPC, or other authorities where required by law.

Law Enforcement

Disclosure may be made where necessary to prevent or detect crime, subject to lawful process.

Technology Vendors

Vetted service providers operate under strict data processing agreements that prohibit independent use of your data.

We implement and maintain appropriate technical and organisational safeguards, including:

• Encryption of data in transit and at rest
• Role-based access controls and audit logging
• Regular security assessments and penetration testing
• Pseudonymisation where appropriate
• Data processing agreements with all third-party vendors

In the event of a personal data breach posing a risk to your rights and freedoms, we will notify both you and the NDPC within 72 hours of becoming aware.

Your personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and tax record-keeping obligations.

Tax records are retained for a minimum of six (6) years from the relevant assessment year, in accordance with applicable tax legislation. After this period, data is securely destroyed or anonymised.

IbomTax uses essential and functional cookies to maintain your session, remember preferences, and ensure platform security. We do not use advertising or cross-site tracking cookies.

You may control cookie behaviour through your browser settings. Disabling essential cookies may impair your ability to use the platform.

For data protection enquiries, subject access requests, or to exercise any right under this Policy, contact our Data Protection Officer:

Email: contactus@akirs.ak.gov.ng
Address: Revenue House, Central Business District, Udo Udoma Avenue, Uyo, Akwa Ibom State, Nigeria

If you are dissatisfied with our response, you may lodge a complaint with the Nigerian Data Protection Commission (NDPC) at ndpc.gov.ng.