1. Our role: controller or processor
Where an organisation buys training for its people, that organisation decides which employees are enrolled and what reporting it receives. In data-protection terms the organisation is the Data Controller and we act as Data Processor on its documented instructions. Our Data Processing Addendum sets out those commitments in full.
Where an individual buys access directly, or when we run our own marketing, community channels and platform security, we act as Data Controller for that processing.
2. Information we collect
- Account and intake details: full name, email address, phone number in international format, organisation, assigned role and workspace.
- Learning activity: stage and module completion, assessment and quiz results, review scheduling data, practice and game scores, experience points, streaks, study time, journal entries you choose to save.
- Session data: facilitator session bookings, attendance, and written session recaps.
- Commerce data: plan and seat purchases, currency, promotional or seat codes redeemed, subscription status and expiry dates. Card and crypto payment details are entered with the payment provider and never reach our servers.
- Community linkage: the Telegram or WhatsApp identifier you connect, so daily content reaches you.
- Technical data: sign-in timestamps, device and browser information, IP address, and error diagnostics used to keep the service secure and working.
3. Why we use it
- To deliver the programme, schedule reviews, run assessments and issue certificates (performance of a contract).
- To report progress and completion to the purchasing organisation that enrolled you (our client's legitimate interest in training oversight, on its instructions).
- To take payment, apply codes, manage renewals and issue receipts (contract and legal obligation).
- To send service messages such as welcome, booking, renewal and expiry emails (contract).
- To keep the platform secure, investigate misuse and fix faults (legitimate interest).
- To send optional community content where you have joined a channel (consent, withdrawable at any time).
4. Who we share it with
We share only what is needed, with vetted providers acting under contract: our cloud hosting and database provider, our email delivery provider, payment providers (Paystack, Stripe and Ivory Pay), our calendar and meeting providers used for facilitator sessions, our meeting-notes provider, our AI gateway provider for narration, tutoring and recaps, and the messaging platforms you choose to join. We do not sell personal information and we do not use it to train third-party AI models.
Progress and completion data for an enrolled employee is visible to that organisation's authorised trainer, manager and administrator accounts. Journal entries you write for yourself are not shared as reporting content.
5. International transfers
Our providers may process data outside your country, including in the European Union and the United States. Where personal data leaves Nigeria, the UK or the EEA, transfers rely on adequacy decisions or on standard contractual clauses together with the security measures described in our Information Security Policy.
6. How long we keep it
- Account and learning records: for the life of the account and up to twenty-four months afterwards, so completion can be re-verified.
- Certificates and verification records: retained so an issued certificate stays verifiable.
- Payment and invoice records: retained for the period tax and company law require.
- Technical logs: typically up to twelve months.
Where we act as processor for an organisation, we delete or return its data on that organisation's instruction at the end of the contract, except where law requires us to keep it.
7. Your rights
Subject to the law that applies to you — Nigeria's Data Protection Act, the UK GDPR or the EU GDPR — you can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and withdraw consent for community messages. Write to us and we respond within thirty days.
If your employer enrolled you, we may need to pass your request to them as the controller and support them in answering it. You may also complain to the Nigeria Data Protection Commission, the UK Information Commissioner's Office, or your local supervisory authority.
8. Children
The platform is built for working professionals and is not intended for anyone under eighteen. We do not knowingly collect data from children.
9. Contact
Write to petrazim.solutions@gmail.com for anything in this document. We answer during Nigerian business hours, Monday to Friday.