Privacy Policy
Updated to reflect Nigeria Data Protection Regulation (NDPR) expectations and secure learner privacy practices.
1. Introduction
School of ADR (“we”, “our”, or “us”) respects the privacy of students, instructors, staff, and partners. This policy explains how we collect, use, store, and protect personal data in accordance with the Nigeria Data Protection Regulation (NDPR) and applicable privacy obligations.
2. Personal data we collect
We may collect the following categories of personal information:
- Name, email address, phone number, and account credentials.
- Course purchases, completion records, assessments, certificates, and learning progress.
- Payment data needed for secure course transactions.
- Platform activity, access logs, and support communications.
- Optional marketing preferences and consent records.
3. Lawful basis and purpose
We process personal data for the purpose of providing access to educational services, verifying identity, maintaining secure accounts, administering payments, issuing certificates, and maintaining compliance records. We also use data to improve performance, detect misuse, and support legitimate business operations.
4. Data minimization and access control
We minimize data collection to what is necessary and restrict access to authorised staff, administrators, and secure systems. Access is controlled using authentication, role-based permissions, and audit logging where relevant.
5. Security measures
We use secure authentication flows, protected session handling, password constraints, administrator activity logging, and controlled access to sensitive data. While no digital system can guarantee absolute security, we apply reasonable administrative, technical, and organisational safeguards to protect personal information against unauthorised access, disclosure, alteration, or loss.
6. Cookies and analytics
Essential cookies support secure sign-in, session continuity, and platform reliability. Optional analytics and marketing cookies are only used when the user explicitly agrees. Users may accept or decline these preferences through the consent banner on the site and can change their selection by revisiting the privacy notice.
7. Data retention
We retain personal data only for as long as needed to fulfil the services, support legal obligations, or protect against disputes, fraud, or operational needs. Where data is no longer required, we securely delete or anonymise it in line with internal retention rules.
8. Your rights
Under NDPR-aligned practices, you may request access to your personal data, request corrections where inaccurate, object to non-essential processing, withdraw consent, and request deletion where lawful and appropriate. To exercise these rights, contact our privacy contact below.
9. Contact
For privacy requests, data access, correction, or deletion, contact: info@schoolofadr.com