Privacy Policy
Last updated: August 10, 2025. Your privacy matters. This policy explains what data we collect, why we collect it, and how you can control it.
1. Who we are
Cyber Elias Academy ("CEA", "we", "us", "our") is a digital skills academy and technology studio operating from 26 Ebony Road, Off Rumuola Road, Port Harcourt, Rivers State, Nigeria. You can contact us at [email protected] or +234 905 862 8386.
2. Information we collect
We collect information you provide directly to us, automatically through our services, and from third-party sources.
Information you provide
- Account details: name, email, phone number, password (hashed), profile photo
- Application data: education history, work experience, motivation statements, portfolio links
- Communication: emails, chat messages, support tickets, feedback forms
- Payments: billing address, transaction IDs (processed by our payment partners; we do not store full card details)
Information collected automatically
- Usage data: pages visited, time spent, features used, click paths, device type, browser, OS
- Log data: IP address, access times, HTTP referrer, error logs
- Cookies and similar technologies: session tokens, preference cookies, analytics cookies (see §7)
Third-party sources
- Authentication providers (Google, GitHub, LinkedIn) when you sign in via OAuth
- Payment processors (Flutterwave, Paystack, Stripe) for transaction verification
- Analytics providers (Google Analytics, Plausible) for aggregate usage insights
3. How we use your information
- Deliver and improve services: run cohorts, grade assignments, issue certificates, match mentors
- Communicate: send cohort updates, assignment reminders, career opportunities, newsletters (opt-out anytime)
- Safety and security: detect fraud, prevent abuse, enforce terms, comply with legal obligations
- Analytics and research: understand usage patterns, improve curriculum, measure outcomes (aggregated, pseudonymised)
- Marketing: with your consent, send relevant programme info, events, partner offers
4. Legal bases (Nigeria Data Protection Act 2023 & GDPR where applicable)
- Contract: processing necessary to deliver programmes you enrolled in
- Legitimate interest: improving platform security, analytics, fraud prevention
- Consent: marketing emails, non-essential cookies, optional profile fields
- Legal obligation: tax records, anti-money-laundering checks, regulatory reporting
5. Data sharing
We do not sell your personal data. We share data only with:
- Service providers: cloud hosting (Vercel, Cloudflare), email (Resend, SendGrid), analytics, payment processors — under data processing agreements
- Employer partners: only when you opt into the talent pool and explicitly approve a specific introduction
- Legal authorities: when required by law, court order, or to protect rights and safety
- Corporate transactions: in a merger, acquisition, or asset sale (you will be notified)
6. International transfers
Our infrastructure is hosted on Vercel (US) and Cloudflare (global). We rely on standard contractual clauses and adequacy decisions to safeguard transfers outside Nigeria. You may request a copy of the safeguards by emailing [email protected].
7. Cookies and tracking
We use essential cookies (session, CSRF, preferences) and optional analytics/marketing cookies. You can manage non-essential cookies via the cookie banner or your browser settings. Blocking essential cookies may break core functionality (login, payments, progress tracking).
8. Your rights
Under the Nigeria Data Protection Act 2023 (and GDPR where applicable), you have the right to:
- Access a copy of your personal data
- Rectify inaccurate or incomplete data
- Erasure ("right to be forgotten") — subject to legal retention requirements
- Restrict or object to processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time (for consent-based processing)
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
To exercise any right, email [email protected]. We respond within 30 days.
9. Retention
- Account data: retained while your account is active, then anonymised after 2 years of inactivity
- Application and academic records: retained for 7 years for verification and transcript purposes
- Payment records: retained for 7 years for tax and audit compliance
- Analytics logs: aggregated after 14 months; raw logs deleted after 30 days
- Marketing preferences: retained until you unsubscribe
10. Children's privacy
Our services are not directed to children under 16. We do not knowingly collect data from children under 16. If you believe we have, contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy. Material changes will be announced via email and a prominent notice on the site at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.
12. Contact
Data Protection Officer: [email protected]
Cyber Elias Academy
26 Ebony Road, Off Rumuola Road
Port Harcourt, Rivers State, Nigeria
+234 905 862 8386