Privacy Policy

SmartHub Academy ("SmartHub", "we", "us", or "our") respects your privacy and is committed to protecting the personal data you share with us. This Policy explains what we collect, how we use it, who we share it with, and the rights you have over your data under the Nigeria Data Protection Regulation (NDPR) and, where applicable, other privacy laws.

1. Information We Collect

a. Information you provide

• Account & registration: name, email, phone, country, state, city, address
• SIWES / Industrial Training applications: institution, department, level, career goals, and optionally a scanned SIWES letter from your institution
• Payments: processed via our payment providers; we do not store full card details on our servers
• Communications: messages, reviews, questions, or feedback you send to us

b. Information collected automatically

• IP address, browser type, device information, and approximate location
• Pages viewed, time spent, and interaction events (via analytics tools such as Google Tag Manager and Facebook Pixel)
• Session recordings of learning-platform activity (views, downloads, completions)

2. How We Use Your Information

• Process applications, enrolments, and payments
• Deliver courses, recordings, and assignments via our LMS
• Verify SIWES eligibility and apply the correct pricing tier
• Send transactional emails (application receipts, course updates, password resets) and, with your consent, marketing communications
• Improve our programs, curriculum, and user experience through analytics
• Prevent fraud, abuse, and unauthorised access
• Comply with legal, accounting, and tax obligations

3. Legal Bases

We process your personal data on one or more of the following legal bases: (a) your consent, which you can withdraw at any time; (b) performance of a contract, such as delivering a course you enrolled in; (c) our legitimate interests in running and improving our business; and (d) compliance with a legal obligation.

4. Who We Share Data With

We share personal data only with trusted third parties acting as data processors or joint controllers:

• Cloudinary — hosting of uploaded files (SIWES letters, profile images, course materials)
• Email providers (ZeptoMail, SendGrid, Nodemailer infrastructure) — transactional and marketing emails
• Google Drive & Google Meet — live classes and recording pipelines
• Anthropic — generating topic labels from class transcripts to organise recordings
• Slack & WhatsApp Cloud API — operational notifications for class recordings (aggregate, not personal data)
• Analytics providers — Google Tag Manager, Facebook Pixel
• Payment processors — for secure payment handling
• Legal and regulatory authorities, where required by law

We do not sell your personal data.

5. International Transfers

Some of our processors (e.g. Cloudinary, Google, Anthropic) operate outside Nigeria. Where personal data is transferred abroad, we take reasonable steps to ensure it is protected by appropriate safeguards consistent with NDPR requirements.

6. How Long We Keep Your Data

• Active accounts & enrolments: for as long as you hold an active account or are enrolled in a program
• SIWES applications: up to 24 months after submission to follow up on intake cycles, then anonymised or deleted
• Financial records: retained for the period required by Nigerian tax and accounting law (typically six years)
• Marketing preferences: until you unsubscribe or ask us to delete your data

7. Cookies & Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, measure site usage, and power marketing analytics. You can control cookies through your browser settings; disabling essential cookies may affect core functionality such as logging in.

8. Your Rights

Under NDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data, subject to legal exceptions
• Object to or restrict certain processing
• Withdraw consent at any time for consent-based processing
• Receive a copy of your data in a portable format
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, email info@smart-hub.academy. We will respond within 30 days.

9. Security

We use industry-standard measures to protect personal data, including encrypted transport (HTTPS), hashed passwords, access controls, and segregated environments. No system is perfectly secure; we cannot guarantee absolute security but we respond promptly to any breach that could affect you.

10. Children

Our Services are not directed to children under 16. If we learn that we have collected personal data from a child under 16 without verified parental consent, we will delete that data.

11. Changes to This Policy

We may update this Policy. The revised version will be posted on this page with a new "Last updated" date. Material changes will be communicated by email or a prominent notice on the website.

12. Contact Us

Data Protection contact: info@smart-hub.academy  ·  or via the Contact page.