Privacy Policy.
Your privacy is paramount to Ceezee Learn ("we," "us," or "our"). This Privacy Policy explains how Ceezee Learn collects, uses, discloses, and protects your personal data when you access or use our website, online platform, courses, and services (collectively, the "Services").
By using our Services, you consent to the data practices described in this Privacy Policy. This Policy operates in conjunction with our Terms of Use.
1. Introduction and Compliance with NDPR
Ceezee Learn is committed to protecting your personal data and ensuring compliance with the Nigeria Data Protection Regulation (NDPR) 2019 (and any successor legislation such as the Nigeria Data Protection Act 2023). This Policy details our commitment to lawful, fair, and transparent processing of your personal data.
2. Personal Data We Collect
We collect personal data that you provide to us directly, automatically through your use of the Services, and from third parties.
2.1. Information You Provide Directly:
- Contact Information: Name, email address, phone number, physical address.
- Account Information: Username, password, security questions and answers.
- Demographic Information: Date of birth, gender, nationality (for certain programs or legal requirements).
- Payment Information: Billing address, payment card details (processed securely by third-party payment processors; we do not store full card numbers).
- Educational Information: Course selections, learning progress, assignments, feedback, communication with instructors.
- Communication: Any information you provide when you contact us for support, send feedback, or participate in surveys.
2.2. Information Collected Automatically:
- Usage Data: Information about how you access and use our Services, including IP address, browser type, device information, operating system, pages viewed, time spent on pages, and referring URLs.
- Cookies and Tracking Technologies: We use cookies and similar technologies (like web beacons) to collect information, enhance your experience, and analyze usage patterns. You can manage your cookie preferences through your browser settings.
- Log Data: Server logs may record information such as the date and time of access, features used, and crash reports.
2.3. Information from Third Parties:
- Payment Processors: When you make a payment, our payment processors provide us with transaction details (e.g., confirmation of payment).
- Google Meet: As our primary platform for live sessions, Google Meet may share certain usage data with us to facilitate class management, though specific personal communication content remains private to Google.
3. How We Use Your Personal Data (Purposes and Legal Basis)
We use your personal data for various purposes, based on specific legal bases as required by the NDPR:
- To Provide and Maintain the Services (Contractual Necessity):
- To register your account and manage your profile.
- To enroll you in courses and grant access to learning materials.
- To facilitate live training sessions via Google Meet.
- To process payments and send transaction confirmations.
- To provide technical support and customer service.
- To Improve Our Services (Legitimate Interests):
- To understand how users interact with our platform and improve its functionality and user experience.
- To develop new courses, features, and educational content.
- To analyze trends and conduct research to enhance our offerings.
- To Communicate with You (Consent or Legitimate Interests):
- To send important updates, announcements, and course-related information.
- To respond to your inquiries and feedback.
- To send marketing and promotional materials, if you have opted in (you can unsubscribe at any time).
- For Security and Fraud Prevention (Legal Obligation & Legitimate Interests):
- To protect the security and integrity of our Services, users, and data.
- To detect and prevent fraudulent or unauthorized activities.
- To Comply with Legal Obligations (Legal Obligation):
- To meet our legal, regulatory, and compliance requirements in Nigeria.
- To respond to lawful requests from public authorities.
4. Disclosure of Your Personal Data
We may disclose your personal data in the following circumstances:
- With Your Consent: We will share your personal data with third parties when we have your explicit consent to do so.
- Service Providers: We engage third-party service providers who perform functions on our behalf, such as payment processing, cloud hosting, analytics, and customer support. These providers are obligated to protect your data and only use it for the purposes for which they were engaged.
- Instructors: Your name, progress, and interactions within a course may be accessible to the instructor(s) of that course to facilitate teaching and feedback.
- Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any such change in ownership or control of your personal data.
- Protection of Rights: We may disclose your data to protect the rights, property, or safety of Ceezee Learn, our users, or others.
5. Data Security
We implement reasonable technical and organizational measures to protect your personal data from unauthorized access, use, alteration, and disclosure. These measures include:
- Encryption of data in transit (SSL/TLS).
- Secure storage of data on reputable servers.
- Access controls to limit who can access your personal data.
- Regular security audits and updates.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your personal data is no longer required, we will securely delete or anonymize it.
7. Your Data Protection Rights (NDPR Rights)
Under the NDPR, you have the following rights regarding your personal data:
- Right to Information: The right to be informed about the collection and use of your personal data.
- Right of Access: The right to access your personal data that we hold.
- Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
- Right to Erasure (Right to be Forgotten): The right to request the deletion of your personal data under certain conditions.
- Right to Restrict Processing: The right to request the restriction or suppression of your personal data.
- Right to Data Portability: The right to obtain and reuse your personal data for your own purposes across different services.
- Right to Object: The right to object to the processing of your personal data in certain circumstances (e.g., for direct marketing).
- Rights in Relation to Automated Decision-Making and Profiling: The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the contact details provided below. We will respond to your request in accordance with the NDPR. We may need to verify your identity before fulfilling your request.
8. International Data Transfers
Ceezee Learn's servers and some of our service providers may be located outside of Nigeria. If we transfer your personal data outside of Nigeria, we will ensure that appropriate safeguards are in place to protect your data in accordance with the NDPR, such as using standard contractual clauses or ensuring the recipient country has an adequate level of data protection.
9. Children's Privacy
Ceezee Learn's Services are intended for individuals 18 years of age or older, or for minors with parental consent. If we become aware that we have collected personal data from a child under 18 without verified parental consent, we will take steps to remove that information from our servers. Parents or guardians who believe their child has provided us with personal data without their consent should contact us.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting the new Privacy Policy on this page with a revised "Effective Date" or by sending an email to the address associated with your account. We encourage you to review this Privacy Policy periodically.
