Privacy Policy

We collect the following categories of personal data:

• Identity Data: Full name, profile photo, username.
• Contact Data: Email address, phone number.
• Account Data: Password (stored as a secure hash never in plain text), country, biography.
• Transaction Data: Payment records, course purchases, enrolment history.
• Usage Data: Pages visited, course progress, lesson completions, time on platform.
• Device Data: IP address, browser type, operating system (collected automatically).
• Communications: Support messages, forum posts, community content.

We use your personal data to:

• Create and manage your account.
• Deliver courses and track your learning progress.
• Process payments and send receipts.
• Send you important notices about your account or courses.
• Send marketing emails (only with your consent you may unsubscribe at any time).
• Improve our Platform through analytics and feedback.
• Detect and prevent fraud or security incidents.
• Comply with legal obligations.

We process your data under the following legal bases:

• Contract: Processing necessary to provide the services you signed up for.
• Legitimate Interests: Improving our Platform and preventing fraud.
• Consent: Marketing communications (you can withdraw consent at any time).
• Legal Obligation: Complying with Nigerian law and regulatory requirements.

We do not sell your personal data. We may share it with:

• Supabase (Infrastructure): Our database and authentication provider, operating under appropriate data processing agreements.
• Payment Processors: To facilitate course purchases. These processors are PCI-DSS compliant.
• Instructors: Your name and enrolment status may be visible to the instructor of courses you are enrolled in.
• Law Enforcement: Where required by Nigerian law or a valid court order.

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will erase your personal data within 30 days, except where retention is required by law (e.g. financial records retained for 7 years per Nigerian tax regulations).

Under Nigerian data protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Ask us to stop processing your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Opt out of marketing at any time.

To exercise any of these rights, email us at privacy@marquetechacademy.com. We will respond within 30 days.

We implement industry-standard security measures including: TLS encryption in transit, AES-256 encryption at rest, Row-Level Security (RLS) on all database tables, and regular security audits. However, no system is 100% secure and we cannot guarantee absolute security.

Your data may be processed outside Nigeria (e.g. on cloud infrastructure). We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

Our Platform is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us immediately.

We may update this Privacy Policy periodically. We will notify you of significant changes by email or a prominent notice on the Platform. Continued use constitutes acceptance.

Data Protection Officer: privacy@marquetechacademy.com

You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.