1. Data controller
Ilimexa Technologies Limited, registered in Nigeria (RC No. [RC NUMBER]), with its registered office at [REGISTERED ADDRESS], Lagos.
2. Data we collect
Registration: name, email, optional phone, country, age confirmation and consent timestamps.
Learner profile: education, employment status, career goals, preferred language, device type and bandwidth tier.
Learning records: lesson completion, quiz scores, practical submissions, watch time and certificates.
Instructor vetting: degrees, NYSC discharge or exemption, trade certificates, government ID and sample lessons.
Billing and payouts: Paystack/Flutterwave references, instructor bank account (NUBAN) details and verification logs.
3. Lawful bases
Explicit consent for marketing emails and voluntary surveys; contractual necessity for delivering courses, processing payments and issuing certificates; legal obligation for tax and educational record-keeping.
4. Separate consent
Marketing and research consents are voluntary and can be revoked at any time in Account Settings without affecting access to your courses.
5. Processors & cross-border transfers
Backblaze B2 (encrypted video and file storage, US/EU); isolated video-transcoding servers; Paystack Payments Ltd and Flutterwave (payments); Twilio SendGrid (transactional email).
6. Security
TLS 1.3 encryption in transit, AES-256 encryption at rest, bcrypt password hashing and role-based access control for staff.
7. Your rights (NDPA ss. 34–37)
You may access, correct, delete or export your personal data (as JSON) from Account Settings or by contacting us. Deletion is subject to legal duties to retain financial and certificate-verification records.
8. Retention
Active account data is kept while you hold an account. Inactive accounts are archived after 24 months. Certificate verification records are kept permanently to prevent fraud and allow employer checks.
9. Data Protection Officer
Contact our DPO at dpo@ilimexa.com or privacy@ilimexa.com.