01Who we are
Codar Tech Africa Ltd ("Codar", "we", "us") is the data controller responsible for personal data collected through our website, mobile apps, courses, and related services.
- Registered office: 43b Adeniyi Jones, Right House Building, Ikeja, Lagos, Nigeria
- Data Protection Officer (DPO): hr-legal@codarhq.com
We comply with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR). For students based in the EU/UK, we additionally comply with GDPR.
02What data we collect
Information you give us directly
- Identity data — name, date of birth, gender
- Contact data — email, phone number, residential address
- Academic data — qualifications, school records (for scholarship applications)
- Financial data — payment method details (processed by our payment partners — we don't store card numbers)
- Profile data — your photo, bio, interests, learning goals
- Communication data — messages with mentors, ticket submissions, survey responses
Information collected automatically
- Device & usage data — browser type, IP address, pages visited, session duration
- Cookies and similar technologies — see our Cookies Policy
- Class attendance & performance data — captured by our learning platform
03How we use your data
We use your personal data to:
- Deliver the courses, bootcamps and scholarships you enrol in
- Process payments, send invoices, manage instalments
- Match you with relevant mentors, hiring partners and opportunities
- Issue certificates and verify them on request
- Communicate with you about your account, classes, and important updates
- Send you optional newsletters, course alerts, and event invites (only with your consent)
- Comply with our legal and regulatory obligations
- Improve our services through analytics and aggregated, anonymised insights
04Legal basis for processing
Under Nigerian and applicable international data protection law, we rely on the following legal bases:
- Contract — to deliver services you've enrolled in
- Consent — for marketing communications, optional analytics, and certain cookies
- Legitimate interests — to improve our services, prevent fraud, and ensure platform security
- Legal obligation — to comply with tax, regulatory, and reporting requirements
Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
05Sharing & third parties
We never sell your personal data. We share data only with:
- Service providers who help us operate (cloud hosting, email, payment processors, analytics)
- Hiring partners — only with your express consent during job placement support
- Mentors and instructors — limited to information needed for teaching
- Authorities — where required by law, court order, or to protect our legal rights
All third parties are contractually bound to handle your data confidentially and only use it for purposes we approve.
Hiring partners: When we share your CV or profile with potential employers, we only do so after you opt in for each individual role or partner. You can withdraw at any time.
06Data retention
We retain personal data for as long as necessary to deliver our services and comply with legal obligations:
- Active accounts: as long as your account is open
- Course records and certificates: indefinitely (for verification purposes)
- Financial & tax records: 7 years (Nigerian tax law)
- Marketing data: until you unsubscribe
- Closed accounts: most data deleted within 90 days of closure (except where law requires longer retention)
07Your rights
Under Nigerian data protection law, you have the right to:
- Access a copy of the personal data we hold about you
- Rectify inaccurate or incomplete data
- Request deletion ("right to be forgotten") — subject to legal exceptions
- Restrict or object to processing
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
To exercise any of these rights, email hr-legal@codarhq.com. We respond to all valid requests within 30 days.
08International transfers
Some of our service providers (e.g. cloud hosting in the EU/US) process data outside Nigeria. We ensure appropriate safeguards are in place — Standard Contractual Clauses, adequacy decisions where applicable, and binding corporate rules — to protect your data wherever it is processed.
09Children's privacy
Codar's services are not directed at children under 16. Some of our school programmes serve students aged 12–17 — in those cases, we collect data only with verifiable parental consent and process it strictly for educational purposes.
If we learn that we have collected data from a child under 16 without parental consent, we will delete it promptly.
10Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated to you via email and through your account dashboard at least 14 days before they take effect.
11Contact our DPO
For privacy questions, complaints, or to exercise your rights:
- Email: hr-legal@codarhq.com
- Postal: Data Protection Officer, Codar Tech Africa Ltd, 43b Adeniyi Jones, Right House Building, Ikeja, Lagos, Nigeria
