Legal
Privacy Policy
Effective date: 10 July 2026
This policy explains how Nova Technology Institute ("Nova", "we", "us") collects, uses, stores, and protects your personal data when you use our website, enroll in programs, or contact us. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA).
1. Data we collect
We collect only the data we need to run the institute and serve you:
- Account data — name, email address, and password (stored as a secure hash, never in plain text).
- Enrollment data — the programs and cohorts you enroll in and your enrollment status.
- Payment data — payment references, amounts, and status from our payment processor. We never see or store your full card details; those are handled by the payment provider (e.g. Paystack).
- Contact messages — anything you send through the contact form.
- Technical data — basic logs (IP address, browser type) needed for security and to keep the service running.
2. How we use your data
We use your data to provide and improve our services: processing enrollments and payments, giving you access to program materials, sending transactional emails (confirmations, receipts, password resets), responding to your messages, and keeping the platform secure.
We send marketing communication only if you opt in, and every marketing email includes an unsubscribe link.
3. Legal bases
We process data on the following bases: performance of a contract (running the program you enrolled in), legitimate interest (site security, service improvement), consent (marketing), and legal obligation (financial record-keeping).
4. Sharing
We do not sell your personal data. We share it only with service providers required to operate the platform — payment processing, email delivery, and cloud hosting — each bound by their own data protection obligations, and where the law requires it.
5. Retention & security
We keep personal data only as long as needed for the purposes above or as required by law (e.g. financial records). Passwords are hashed with a strong algorithm, connections are encrypted (HTTPS), and access to personal data inside Nova is role-restricted and logged.
6. Your rights
Under the NDPA you can request access to, correction of, or deletion of your personal data; object to or restrict processing; and withdraw consent at any time. To exercise any of these rights, email us — we respond within 30 days.
7. Contact
Questions about this policy or your data: hello@novatechnologyinstitute.com.
This document is a starter draft prepared for Nova Technology Institute and has not yet been reviewed by counsel.
