Legal centre

Privacy Policy

What personal information we collect, why we hold it, who helps us process it, how long we keep it, and the rights you can exercise at any time.

Version 1.0Updated 14 August 2026Everyone who applies to, learns at, teaches at or is verified through the Academy

Platinum Edu-Tech Consult Nigeria Ltd (RC 7110229) is the data controller for personal information processed in the Platinum ResearchTech Academy. Our registered address is 84 Gandu GRA, Atiku Abubakar Road, Kano, Nigeria.

We handle personal information in line with the Nigeria Data Protection Act framework and the principles it sets out: collect only what is needed, use it only for the purpose you were told about, keep it accurate and secure, and let you exercise your rights.

1. Information we collect

  • Identity and contact details: full name, email address, phone number, country.
  • Professional context: institution, department, role or title, years of experience, and the motivation statement you write when applying.
  • Account data: your user identifier, roles (learner, instructor, administrator) and sign-in activity.
  • Learning records: enrolment and admission status, session attendance and attendance audit events, lesson progress, weekly Practice and Capstone submissions and any files you upload, marks, instructor feedback and internal AI review notes.
  • Credential records: certificate number, holder name, programme, classification, weighted score, issue date and any revocation.
  • Support and messaging: messages you send to the AI study assistant, and correspondence with our team.
  • Instructor applications: biography, expertise, CV, licence or certificate references and the documents you upload.
  • Technical data: minimal server logs and error reports needed to keep the platform working and secure.

2. Why we use it, and on what basis

  • To assess your application and manage admission — performance of our agreement with you, and our legitimate interest in running a fair selection process.
  • To deliver teaching, track attendance, mark work and issue credentials — performance of our agreement with you.
  • To operate the credential verification page so third parties can confirm a certificate is genuine — our legitimate interest in credential integrity, and yours in a credential that can be trusted.
  • To protect academic integrity and investigate suspected breaches — our legitimate interest, balanced against your interests, with a right of reply.
  • To send service messages such as admission outcomes, session notices and result releases — performance of our agreement with you.
  • To keep records required by law, accreditation or accounting — legal obligation.
  • To improve the Academy using aggregated or anonymised data — our legitimate interest. We do not sell your personal information, ever.

3. The credential verification page is public by design

When we issue you a credential, a limited record — certificate number, holder name, programme, classification and status — can be looked up on our public verification page. That is what makes the credential worth holding.

Nothing else about you is exposed there: not your phone number, not your email address, not your marks per assessment, not your submissions.

4. Who else processes your information

We use a small number of service providers who act on our instructions and are bound to confidentiality and security obligations:

  • Cloud hosting and application delivery for the Academy platform.
  • Managed database and file storage for enrolment records, submissions and uploaded documents.
  • Model providers that power AI-assisted first-pass marking and the AI study assistant. Submissions sent for AI review are used only to produce that review.
  • Email and messaging delivery for service notifications.

5. AI processing, and what it never decides alone

AI-assisted review produces a suggestion and notes for your instructor. It is not shown to you as your result and it does not determine your mark, your certificate, or your admission.

Decisions that affect you — admission, marks, certification, revocation — are made by a person. You can ask who made a decision and on what basis.

6. Security

  • Access is role-based: learners see their own records; instructors see the cohorts assigned to them; administrators see what their role requires.
  • Database access rules are enforced at the data layer, not only in the interface.
  • Uploaded files are served through short-lived signed links rather than public URLs.
  • Sensitive administrative fields, such as certificate numbering, are not readable by ordinary accounts.
  • Data in transit is encrypted using HTTPS.

7. How long we keep it

We keep application and learning records for as long as your relationship with the Academy is active, and afterwards only as long as we need them to defend a credential, meet a legal obligation, or answer a verification request.

Credential records are retained long-term on purpose: a certificate that cannot be verified years later is worthless. Working files, such as uploaded submissions, are kept for a shorter period than the credential record itself.

8. Your rights

Your side

  • Ask for a copy of the personal information we hold about you.
  • Ask us to correct anything inaccurate — including the spelling of your name on a certificate.
  • Ask us to delete information we no longer need, or object to a particular use.
  • Withdraw consent where we relied on consent, without affecting your enrolment.
  • Complain to the supervisory authority if you are not satisfied with our response.

Our commitment

  • We answer rights requests within a reasonable period and without charge in normal cases.
  • We verify identity before releasing records, to protect you.
  • We explain clearly if we cannot fully meet a request, and why.
  • We tell you about a personal-data breach that presents a real risk to you.

9. Cookies and tracking

The Academy uses only the storage needed to keep you signed in and to remember basic interface state. We do not run advertising trackers or sell audience data.

10. Transfers outside Nigeria

Some of our service providers operate infrastructure outside Nigeria. Where information is transferred abroad, we rely on providers who commit contractually to protection standards consistent with the Nigeria Data Protection Act framework.

11. Contact us

Privacy questions, rights requests and complaints: info@platinumedutechconsult.com, or write to us at 84 Gandu GRA, Atiku Abubakar Road, Kano, Nigeria.

Still being finalised

These points are being confirmed internally and will be published in the next version of this document. Everything else above applies today.

  • Named data protection officer or privacy contact address to publish here.
  • Exact retention periods per record type (applications, submissions, credentials).
  • Final list of sub-processors and their hosting regions, for publication.

Questions about this document? info@platinumedutechconsult.com