Legal

Privacy Policy

Last updated: August 15, 2026

Template notice: this is a starting-point privacy policy drafted to match what this site actually does. It is not legal advice. Have it reviewed by a Nigerian lawyer familiar with the Nigeria Data Protection Act (NDPA) 2023 before you rely on it in production.

1. Who we are

Code Secure Academy ("CSA", "we", "us") runs cohort-based tech training and an associated marketplace at codesecureacademy.com. This policy explains what personal data we collect, why, and what rights you have over it.

2. What we collect

Account data: name, email address, phone number, and track of interest when you sign up.
Payment data: we never see or store your card details. Payments are processed directly by Paystack. We store the transaction reference, amount, and status only.
Marketplace seller data: approved sellers provide a bank account and account number so Paystack can pay out their share of a sale automatically.
Content you submit: reviews, marketplace listings, and any support messages you send us.
Google sign-in: if you use "Continue with Google", we receive your name, email, and profile photo from Google. We never see your Google password.
Technical data: IP address, browser type, and basic usage data via essential cookies (see our Cookie Policy).

3. Why we collect it

To create and manage your account and enrollments
To process cohort and marketplace payments
To send your WhatsApp group invite once payment is confirmed
To moderate and publish reviews
To communicate with you about your enrollment, orders, or support requests

4. Who we share it with

We use the following processors to run the platform. Each only receives the data it needs to do its job:

Paystack: payment processing
Cloudinary: image and video hosting
Supabase: database hosting
Render: application hosting
Google: optional sign-in

We do not sell your personal data to anyone.

5. Cookies

We use strictly necessary cookies to keep you logged in and your checkout secure. Any non-essential cookies (e.g. analytics, if we enable them in future) only run after you accept them. See our Cookie Policy for details, and use the "Manage cookie preferences" link in the footer any time to change your choice.

6. How long we keep data

We keep account and transaction data for as long as your account is active and as needed to meet our legal and tax obligations afterward. You can request deletion at any time (see Section 7).

7. Your rights

Under the NDPA, you can request access to, correction of, or deletion of your personal data, and object to certain processing. To exercise any of these, contact us using the details below.

8. Security

Passwords are stored hashed, not in plain text. Traffic to the site is encrypted in transit (HTTPS). No system is 100% secure, so we can't guarantee absolute security, but we take reasonable, industry-standard steps to protect your data.

9. Changes to this policy

We may update this policy as the platform changes. Material changes will be reflected by an updated "Last updated" date above.

10. Contact us

Questions about this policy or your data: privacy@codesecureacademy.com