Privacy policy
What personal data we collect, why we collect it, how long we keep it, and the rights you have under the Nigeria Data Protection Act 2023.
CAXTON SOFTWARE DEV HUB (registration number 9675871) is the data controller for personal data collected through this website. Our address is No. 56, Issac A.A Street, Ungwan Zango, Maraban Rido, Kaduna, Kaduna State, Nigeria.
This policy explains what we do with your information. We have tried to write it in plain English rather than legalese.
What we collect
When you contact us: your name, email address, and anything else you choose to put in the message — usually a phone number, company name, and a description of your project.
When you create an account: your name, email address, an optional phone number, and a hashed version of your password. We never store your password itself.
When you pay: a payment reference, the amount, the status, and the payment channel. Card details go directly to Flutterwave and never reach our servers.
When you use the study assistant: the messages you send and the replies you receive, so that you can return to a conversation later.
Automatically: basic server logs including IP address and browser type, used for security and debugging.
Why we use it
- To provide what you paid for — course access, mentorship sessions, and support
- To reply to your enquiry
- To take payment and keep accurate financial records
- To improve our courses and this website
- To send you service messages about your enrolment
- To meet our legal and tax obligations
We rely on performance of a contract for the first three, our legitimate interests for the next two, and legal obligation for the last. Marketing email is sent only with your consent, and every marketing email has an unsubscribe link.
Who we share it with
We use a small number of processors, each bound by contract to protect your data:
- Flutterwave — payment processing
- Anthropic — the model behind the study assistant. Your conversations are sent to their API to generate replies.
- Resend — transactional email delivery
- Our hosting provider — running the site and database
We do not sell your personal data. We do not share it with advertisers.
Transfers outside Nigeria
Some of the processors above operate outside Nigeria. Where data is transferred internationally, we rely on the safeguards permitted under the Nigeria Data Protection Act 2023, including contractual protections with each processor.
How long we keep it
Account and enrolment records: for as long as your account is open, and seven years after that where financial records require it. Contact enquiries: two years. Study assistant conversations: until you delete them or close your account. Server logs: 90 days.
Your rights
Under the Nigeria Data Protection Act 2023 you have the right to request a copy of your data, to have inaccurate data corrected, to ask us to delete data we no longer need, to object to processing based on legitimate interests, and to withdraw consent for marketing at any time.
To exercise any of these, email us at the address on our contact page. We will respond within 30 days. If you are unsatisfied with our response, you can complain to the Nigeria Data Protection Commission.
Cookies
We use one strictly necessary cookie to keep you signed in. We do not use advertising or third-party tracking cookies.
Security
Passwords are hashed with bcrypt. Traffic is encrypted in transit. Access to production data is limited to the people who need it. No system is perfectly secure, but if a breach affects you we will tell you and the Commission as required by law.
Changes
If we change this policy materially, we will email registered users and update the date at the top.