This notice explains what personal data LearnCyber collects when you use learncyber.academy, enrol on a track or contact us, why we collect it, who we share it with, and the rights you have.
Who is responsible for your data
LearnCyber by Hackrowd (RC 9340665), Ikoyi, Lagos, Nigeria, is the data controller. For anything about your data, email privacy@learncyber.academy.
What we collect
When you enrol:
- your full name, as it should appear on your certificate
- your email address and WhatsApp number
- the track and cohort you chose, and how you're paying (in full or in instalments)
- your payment reference, the amounts, and the payment status we receive from Paystack
- the version of our terms you accepted, and when
- whether you agreed to receive news about webinars and cohorts
We never see or store your card or bank details. Paystack collects and processes them directly.
When you contact us or apply: your name, email, phone number if you give it, and your message.
When you finish a track: your certificate record: your name, track, cohort, issue date and reference number.
When you browse: if you accept analytics and marketing cookies, our analytics and advertising tools record how you use the site. See "Cookies" below. If you don't accept them, they don't load.
Why we use it, and our legal basis
| Purpose | Legal basis under the NDPA |
|---|---|
| Enrolling you, taking payment, running your track, issuing your certificate | Performance of a contract with you |
| Answering your enquiry | Your request, and our legitimate interest in replying |
| Keeping payment and tax records | Legal obligation |
| Letting employers check a certificate you show them | Legitimate interest, limited to the details printed on the certificate |
| Preventing fraud and keeping the site secure | Legitimate interest |
| Sending you news about webinars and cohorts | Your consent, which you can withdraw at any time |
| Analytics and advertising cookies | Your consent |
Who we share it with
We share only what each service needs to do its job:
- Paystack: processes your payment.
- Supabase: our database. Your enrolment and payment records are stored in London, United Kingdom.
- Vercel: hosts the website. Pages are served from Vercel's global network, and the site's server functions run in London.
- Resend: sends your confirmation and instalment emails.
- Hostinger: hosts our email inbox.
- Meta (WhatsApp): if you message us on WhatsApp, or we contact you there about your enrolment.
- Meta (Facebook pixel): only if you accept marketing cookies.
- Vercel Web Analytics: counts page visits without cookies and without identifying you.
- Hackrowd Technology: our instructors are Hackrowd's engineers and need your name and course work to teach you.
We don't sell your personal data.
Sending data outside Nigeria
Some of these services store or process data outside Nigeria, mainly in the United Kingdom, the European Union and the United States. Where we transfer your data abroad, we rely on the safeguards the NDPA allows. For our database in London, that is the United Kingdom's comparable data protection law together with Supabase's data processing agreement; for other providers, their data protection terms.
How long we keep it
| Data | How long |
|---|---|
| Enrolment and payment records | 6 years, for tax and contract purposes |
| Certificate records | Kept permanently, so your certificate can always be verified |
| Applications and enquiries from people who didn't enrol | 12 months |
| Marketing contacts | Until you unsubscribe |
Your rights
Under the NDPA you can:
- ask for a copy of your data
- ask us to correct it
- ask us to delete it, unless we have to keep it by law
- ask us to restrict or stop using it
- receive it in a format you can take elsewhere
- object to how we use it
- withdraw consent at any time, without affecting what we did before
- complain to the Nigeria Data Protection Commission (NDPC)
To use any of these, email us at the address above. We'll reply within 30 days.
Cookies
The site uses cookies without asking only where it needs them to work, for example to remember your cookie choice. Marketing cookies, including the Meta pixel, load only after you choose "Accept" on the cookie banner. Our visit counting (Vercel Web Analytics) uses no cookies. You can change your choice at any time from the link in the footer. The cookie policy lists every cookie.
Security
Your records are kept in a database that only our own server code can access, over encrypted connections. Access is limited to the people who need it to run the school.
Children
Our tracks are for people aged 18 and over. Someone under 18 can enrol only if a parent or guardian signs the terms of enrolment, and we then hold the parent or guardian's details too. Otherwise we don't knowingly collect data from anyone under 18.
Changes
If we change this notice, we'll update the date below and, if the change matters to you, tell you by email.
Last updated: 9 October 2026