← Back home

Privacy Policy

Updated to reflect Nigeria Data Protection Regulation (NDPR) expectations and secure learner privacy practices.

1. Introduction

School of ADR (“we”, “our”, or “us”) respects the privacy of students, instructors, staff, and partners. This policy explains how we collect, use, store, and protect personal data in accordance with the Nigeria Data Protection Regulation (NDPR) and applicable privacy obligations.

2. Personal data we collect

We may collect the following categories of personal information:

  • Name, email address, phone number, and account credentials.
  • Course purchases, completion records, assessments, certificates, and learning progress.
  • Payment data needed for secure course transactions.
  • Platform activity, access logs, and support communications.
  • Optional marketing preferences and consent records.

3. Lawful basis and purpose

We process personal data for the purpose of providing access to educational services, verifying identity, maintaining secure accounts, administering payments, issuing certificates, and maintaining compliance records. We also use data to improve performance, detect misuse, and support legitimate business operations.

4. Data minimization and access control

We minimize data collection to what is necessary and restrict access to authorised staff, administrators, and secure systems. Access is controlled using authentication, role-based permissions, and audit logging where relevant.

5. Security measures

We use secure authentication flows, protected session handling, password constraints, administrator activity logging, and controlled access to sensitive data. While no digital system can guarantee absolute security, we apply reasonable administrative, technical, and organisational safeguards to protect personal information against unauthorised access, disclosure, alteration, or loss.

6. Cookies and analytics

Essential cookies support secure sign-in, session continuity, and platform reliability. Optional analytics and marketing cookies are only used when the user explicitly agrees. Users may accept or decline these preferences through the consent banner on the site and can change their selection by revisiting the privacy notice.

7. Data retention

We retain personal data only for as long as needed to fulfil the services, support legal obligations, or protect against disputes, fraud, or operational needs. Where data is no longer required, we securely delete or anonymise it in line with internal retention rules.

8. Your rights

Under NDPR-aligned practices, you may request access to your personal data, request corrections where inaccurate, object to non-essential processing, withdraw consent, and request deletion where lawful and appropriate. To exercise these rights, contact our privacy contact below.

9. Contact

For privacy requests, data access, correction, or deletion, contact: info@schoolofadr.com