CertiTrack Privacy Policy (Nigeria)

Effective Date: 18/07/2025
CertiTrack ("we", "us", "our") is committed to protecting your personal information and privacy. This Privacy Policy explains how we collect, use, store, and
protect your data when you use our services via CertiTrack. This policy aligns with the Nigeria Data Protection Act 2023 (NDPA) and other relevant laws.
 

1. Information : We may collect the following categories of personal information:

A. Information You Provide:
Full name
Date of birth
Email address
Phone number
Learner/Registration Number
Identity documents (e.g. passport, change-of-name documents)
Qualification and academic history
Payment information (processed securely via third-party payment platforms)

B. Automatically Collected Data:
IP address
Browser and device information
Time and date of access
Actions taken on the platform (e.g. login, order history)

2. Purpose of Data Collection:
Your personal data is collected and processed for the following purposes. To authenticate and verify your academic records. To process orders for replacement certificates and transcripts. To deliver digital documents. To respond to your enquiries or support requests. To detect, prevent, or investigate fraud and misuse of the portal. To improve our platform’s security, functionality, and performance. To comply with legal obligations and regulatory requests

3. Legal Basis for Processing: We rely on the following legal grounds under the NDPA: Consent – where required, especially for optional services. Performance of a contract – to fulfil your requests for certificates/transcripts.
Compliance with legal obligations – e.g. for record keeping, Legitimate interest – including fraud prevention and service improvement

4. Data Sharing and Disclosure:  We do not sell or rent your personal data. We may share your information only with: Payment processors (Paystack).
Regulatory or government bodies where legally required, Accredited institutions or employers when documents are verified or shared by you. Service providers who support our operations under confidentiality obligations.

5. Data Storage and Security:  Your data is stored securely within Nigeria or in compliant data centres abroad under NDPA cross-border provisions. We use encryption, firewalls, access controls, and regular audits to ensure data protection. Access to your data is strictly restricted to authorized personnel only.

6. Your Rights: Under the Nigeria Data Protection Act As a data subject under the NDPA 2023, you have the right to: Access your personal data Rectify inaccurate or incomplete data Withdraw consent (where consent is the basis for processing). Request deletion (subject to legal retention requirements). Object to certain types of processing Request data portability in a readable format . You can exercise your rights by contacting us via the details below.

7. Data Retention: We retain your data only for as long as necessary to: Fulfill your service requests, Meet legal and regulatory obligations. Resolve disputes, Enforce our agreements When no longer needed, your data will be securely deleted or anonymised.

8. Use of Cookies:
We may use cookies to: Improve website performance Enable secure login sessions Collect analytics to enhance user experience, You can adjust your browser settings to manage or block cookies.

9. Children’s Privacy:
This service is intended for individuals 18 years and above. If we discover data from a person under 18, we will delete it promptly unless it is part of a valid
academic record.

10. Updates to This Policy:
We may update this Privacy Policy from time to time. Changes will be posted here and, where appropriate, communicated via email or portal notification.

11. Contact Us: If you have questions, concerns, or wish to exercise your data rights, contact.