Controller and scope
FavAcademy Limited, Nigeria, is the organization responsible for deciding how personal information is used for FavAcademy services. Use the privacy contact below for questions and rights requests. This policy covers FavAcademy’s public site, member services and staff operations; independently operated external services have their own notices.
Information we handle
Depending on the functions you use, information can include your name and email, account identifiers and preferences, authentication and security records, learning progress and assessment activity, support messages, newsletter choices and consent records. If you purchase a service, records can include the order, amount, currency, payment reference and status. Payment credentials should be entered only in the applicable payment provider’s secure flow. Do not include unnecessary sensitive information in messages or community posts.
Why we use information
We use information needed to operate accounts, provide requested learning and support, maintain security, manage authorized purchases and keep appropriate records. Newsletter messages require the separate choices and confirmation provided during signup. Legal bases include performing a contract or taking steps you request before a contract, complying with legal obligations, consent where required, and legitimate interests such as protecting the service where those interests do not override your rights. Each actual processing activity must have an applicable basis; consent to marketing is not a condition of ordinary account access.
Newsletter and communication choices
Newsletter signup is separate from creating a member account. You choose topics and explicitly consent; an email asks you to confirm. You may stop newsletter emails using an unsubscribe link or by contacting us. Necessary security, transaction or support messages are distinct from marketing. Withdrawing consent does not retrospectively invalidate processing that was lawful before withdrawal.
Service providers and disclosures
Service providers may process information necessary for hosting, security, email, payments or other features you request. Disclosure may also be necessary to comply with lawful requirements, handle a dispute or protect rights. Community posts and other material you deliberately publish can be visible to their intended audience. Contact us for information about the providers and processing locations relevant to a service you use.
International handling
Some service providers may operate outside Nigeria. Before transferring personal information, the applicable legal basis and safeguards must be established. Contact the privacy address for information about a particular service. Information may be processed outside Nigeria; contact us for details of the arrangements relevant to your information.
Retention and deletion
Information should be retained only for the period needed for the purpose for which it was collected, including necessary legal, accounting, security and dispute obligations. Retention criteria include whether an account remains active, the nature of the record, outstanding requests or disputes and applicable law. A deletion request may leave limited records needed for a justified obligation or legal hold. Contact us for the retention criteria and backup deletion timing applicable to your request.
Your rights and requests
Subject to applicable law and relevant exceptions, you may request access, correction, deletion, restriction, portability or objection to processing, and withdraw consent where consent is the basis. Contact the privacy address below with enough information to identify the relevant account. We may ask for proportionate verification and will explain any refusal or limitation. Do not send passwords or excessive identity documents. You may complain to the Nigeria Data Protection Commission and use other remedies available under applicable law.
Security and sensitive features
Member and staff accounts use separate portal sessions and access controls. No internet service can promise absolute security. Private coaching recordings, AI processing of personal material or other sensitive optional features require their own appropriate notice and permission where applicable; their inclusion in product plans does not mean they are currently collecting your information.
Age and policy updates
Member accounts and purchases are intended for people aged 18 or older. Tell us if you believe a child has provided personal information contrary to this policy so we can assess the situation. Changes affecting how personal information is used should be communicated appropriately.