Privacy and Policy

PROLIFIC BUSINESS & INNOVATION ACADEMY

PRIVACY POLICY

Effective Date: 23 February 2026

www.pbia.com.ng

 

This Privacy Policy explains how Prolific Business & Innovation Academy ("PBIAcademy") collects, uses, stores, shares, and protects your personal information when you access www.pbia.com.ng or use any of our services. Please read this Policy carefully before using the Platform.

Prolific Business & Innovation Academy ("PBIAcademy," "we," "us," "our") is committed to protecting the privacy and personal data of every person who interacts with our Platform. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access www.pbia.com.ng or use any of our services.

This Policy applies to all Users — including Students, Instructors, Organisation representatives, and visitors — whether you are based in Nigeria or anywhere else in the world.

By registering an account, purchasing a course, or continuing to browse the Platform, you acknowledge that you have read and understood this Policy. If you have any questions, please contact us before proceeding.

The data controller responsible for your personal data is:

 

Organisation	Prolific Business & Innovation Academy (PBIAcademy)
Website	www.pbia.com.ng
Email	info@pbia.com.ng
WhatsApp	+234 816 783 5231
DPO Contact	Email: info@pbia.com.ng  |  Subject: "Privacy / Data Protection Enquiry"

3.1  Account & Registration Data

•      Full name, username, email address, and password (stored in hashed/encrypted form);

•      Phone number, where voluntarily provided;

•      Country of residence and time zone;

•      Professional background and biographical information entered in your profile.

3.2  Payment & Transaction Data

•      Transaction amounts, currency, and dates;

•      Payment method type (card, bank transfer, mobile money);

•      Billing name and billing country;

•      Transaction reference numbers issued by payment processors.

 

Payment Security PBIAcademy does not store full card numbers, CVV codes, or full bank account details. Payment processing is handled exclusively by PCI-DSS compliant third-party processors.

 

3.3  Course & Learning Data

•      Courses enrolled in, viewed, and completed;

•      Progress percentages, quiz scores, and assessment results;

•      Certificates earned and completion dates;

•      Instructor notes and annotations where applicable.

3.4  Technical & Usage Data

•      IP address, browser type, and operating system;

•      Device identifiers and screen resolution;

•      Pages visited, time spent on page, and navigation patterns;

•      Referring websites and search terms;

•      Error logs and diagnostic information.

3.5  Communication Data

•      Messages sent through the Platform's internal messaging system;

•      Support requests, feedback, and complaints submitted to us;

•      Survey responses and review content.

3.6  Instructor & Organisation-Specific Data

•      Bank account or payment details for payout purposes;

•      Submitted course content and associated metadata;

•      Performance metrics including sales, enrolments, and ratings;

•      Business registration information for Organisation accounts.

•      Directly from you — when you register, complete your profile, purchase a course, submit a form, or contact us;

•      Automatically — through cookies, web beacons, analytics tools, and server logs when you use the Platform;

•      From third parties — from payment processors confirming transaction status; from social login providers (e.g. Google) where you choose to sign in that way; and from business partners or referral programmes.

We use your personal data for the following purposes:

•      To create, manage, and authenticate your account;

•      To process payments and deliver purchased courses;

•      To issue certificates of completion;

•      To personalise your learning experience and course recommendations;

•      To communicate with you about your account, transactions, and support requests;

•      To send you marketing and promotional communications where you have consented or where permitted by applicable law;

•      To process Instructor payouts and provide earnings statements;

•      To detect, investigate, and prevent fraud, abuse, and security incidents;

•      To comply with legal obligations under Nigerian law and applicable international law;

•      To analyse Platform usage and improve our services, content, and user experience;

•      To enforce our Terms and Conditions and other policies.

Where applicable — including for Users in the EEA, UK, and other GDPR-applicable jurisdictions — our legal bases for processing personal data are:

•      Contract performance — processing necessary to provide the services you have requested, including course access and payments;

•      Legitimate interests — analytics, fraud prevention, security monitoring, and improving Platform quality, where these interests do not override your fundamental rights;

•      Legal obligation — compliance with applicable law, court orders, or regulatory requirements;

•      Consent — marketing communications and the use of non-essential cookies, where your consent has been obtained and can be withdrawn at any time.

 

For Nigerian Users, processing is conducted in accordance with the lawful processing conditions set out in the Nigeria Data Protection Act 2023 and NITDA's implementing regulations.

We Do Not Sell Your Data PBIAcademy does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your data is shared only where necessary to provide the services described in this Policy.

 

We may share your data with:

•      Payment processors — to process transactions securely (e.g. Paystack, Flutterwave, Stripe, or equivalent);

•      Cloud hosting and infrastructure providers — to store and serve Platform data securely;

•      Analytics providers — to help us understand Platform usage (data is aggregated and anonymised where possible);

•      Email and communication service providers — to deliver transactional and marketing communications;

•      Instructors — limited enrolment data (name and course progress) necessary for course delivery and support;

•      Legal and regulatory authorities — where required by law, court order, or government request, or to protect the rights and safety of PBIAcademy, its Users, or the public;

•      Business successors — in the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity subject to equivalent privacy protections.

All third-party service providers are required to process your data only on our instructions and in compliance with applicable data protection law.

Where personal data is transferred outside Nigeria — for example, to cloud servers located in other countries or to international service providers — PBIAcademy will ensure that appropriate safeguards are in place, including:

•      Standard Contractual Clauses (SCCs) approved by the relevant supervisory authority;

•      Transfers only to countries determined to provide adequate data protection under NITDA guidance or equivalent international frameworks;

•      Data Processing Agreements with all international sub-processors.

For Users in the EU/EEA or UK, PBIAcademy will comply with GDPR Chapter V requirements for international transfers, including reliance on SCCs where no adequacy decision has been granted.

9.1  Types of Cookies We Use

•      Strictly necessary cookies — essential for the Platform to function (login session, shopping cart, security). These cannot be disabled.

•      Performance and analytics cookies — help us understand how Users interact with the Platform (e.g. Google Analytics). Anonymised where possible.

•      Functional cookies — remember your preferences such as language, currency, and region settings.

•      Marketing and targeting cookies — used to deliver relevant advertising on third-party platforms. Only deployed with your explicit consent.

9.2  Managing Cookies

On your first visit, you will be presented with a cookie consent banner. You may adjust your cookie preferences at any time through your browser settings or our cookie preference centre. Disabling certain cookies may affect Platform functionality.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected. The retention schedule below sets out our standard retention periods:

 

Data Type	Retention Period
Account Data	Duration of account plus 12 months following closure
Transaction Records	Minimum 7 years (Nigerian financial regulations)
Certificate Records	Retained indefinitely to verify credentials on request
Support & Communications	3 years from date of last interaction
Technical & Usage Logs	Up to 12 months for security and diagnostic purposes

 

When data is no longer required, we will securely delete or anonymise it in accordance with industry-standard data destruction procedures.

Subject to applicable law, you have the following rights regarding your personal data:

 

Right of Access	Request a copy of personal data we hold about you.
Right to Rectification	Request correction of inaccurate or incomplete data.
Right to Erasure	Request deletion where no overriding legal basis exists.
Right to Restrict	Request limitation of how we use your data.
Right to Portability	Receive data in a structured, machine-readable format.
Right to Object	Object to processing based on legitimate interests.
Withdraw Consent	Withdraw consent at any time without affecting prior processing.
Automated Decisions	Request human review of solely automated decisions.

 

How to Exercise Your Rights To exercise any of these rights, submit a written request to info@pbia.com.ng with the subject line "Data Rights Request." We will respond within 30 days. We may need to verify your identity before processing your request.

PBIAcademy implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

•      TLS/SSL encryption for all data transmitted to and from the Platform;

•      Encrypted storage of sensitive personal data at rest;

•      Access controls limiting staff access to personal data on a need-to-know basis;

•      Regular security assessments and vulnerability testing;

•      Incident response procedures for data breaches.

 

Breach Notification In the event of a personal data breach likely to result in risk to your rights and freedoms, PBIAcademy will notify NITDA and affected Users within 72 hours as required by the Nigeria Data Protection Act 2023 and, where applicable, GDPR.

 

No internet transmission is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security.

The Platform is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental or guardian consent. If we become aware that we have collected data from a child under 16 without appropriate consent, we will take prompt steps to delete that data. If you believe we hold data about a child without valid consent, please contact us immediately at info@pbia.com.ng.

The Platform may contain links to third-party websites, applications, and services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party site you visit. PBIAcademy has no control over and accepts no responsibility for the privacy practices or content of third parties.

We may send you marketing emails, SMS messages, or WhatsApp communications about new courses, promotions, and Platform updates where you have opted in or where permitted by applicable law. You may opt out of marketing communications at any time by:

•      Clicking "unsubscribe" in any marketing email;

•      Updating your communication preferences in your account settings;

•      Sending an opt-out request to info@pbia.com.ng.

Opting out of marketing does not affect the delivery of transactional messages such as payment receipts, course access confirmations, and security alerts.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or Platform features. When material changes are made, we will notify you by email or through a prominent in-Platform notice and update the Effective Date at the top of this document. We encourage you to review this Policy periodically. Your continued use of the Platform after changes become effective constitutes acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our designated Data Protection Officer:

 

DPO / Privacy	Prolific Business & Innovation Academy
Email	info@pbia.com.ng
Subject Line	"Privacy / Data Protection Enquiry"
Website	www.pbia.com.ng/contact
Phone	+234 814 375 2248
WhatsApp	+234 816 783 5231

 

If you are based in the EU/EEA and believe your data rights have been violated, you have the right to lodge a complaint with your local supervisory authority (e.g. your national Data Protection Authority).

If you are based in Nigeria, you may contact the National Information Technology Development Agency (NITDA) at nitda.gov.ng.