Privacy Policy

Who we are

Kavinoq Academy is a software engineering bootcamp operated from Lagos, Nigeria. This Privacy Policy explains what personal data we collect when you visit academy.kavinoq.com or register for a cohort, how we use it, and the rights you have under the Nigeria Data Protection Regulation (NDPR) and equivalent frameworks.

What we collect

• Registration details: your full name, email address, optional phone number, and the track you're applying to.
• Payment records: dates and amounts of tuition payments (we do not store card or bank account numbers — payments are processed off-platform via bank transfer).
• Communication history: the emails and SMS messages we send you (delivered through ZeptoMail and Termii respectively) and any responses you send us.
• Recruiter attribution: if you arrived via a recruiter link (/r/{code}), we set a signed cookie so the recruiter is credited when you register. The cookie does not contain your identity.
• Site analytics: when Google Analytics is enabled, your browser receives standard GA4 cookies. We do not link those to your registration record.

How we use it

• To deliver the bootcamp programme you registered for, including class scheduling, materials, and certificates of completion.
• To contact you about your application, payments, and cohort logistics.
• To honour recruiter commission arrangements where applicable.
• To improve the site and curriculum based on anonymised usage data.
• To comply with legal obligations (tax records, accounting).

Cookies

We use three categories of cookies. Where consent is required by law, we ask before loading anything beyond the strictly-necessary category.

• Strictly necessary: session cookies to keep you signed in to admin or recruiter areas; CSRF protection.
• Functional: the recruiter-attribution cookie (kav_ref, 90 days) and the "remember me" cookies on admin/recruiter sign-in (30 days).
• Analytics: Google Analytics 4 (_ga, _ga_*). Only loaded with your consent.

Who we share data with

We share personal data only with vendors required to run the service:

• ZeptoMail (Zoho Corporation): transactional email delivery.
• Termii: SMS delivery for verification codes and reminders.
• Cloudflare R2: encrypted off-site backups of the application database.
• Google Analytics: anonymised site usage (when consented).

We do not sell personal data to third parties.

How long we keep it

Registration and payment records are retained for at least the duration of the cohort plus seven years for tax and accounting purposes. Email and SMS message bodies are retained for 12 months. You may request earlier deletion subject to our legal obligations.

Your rights

Under NDPR you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccuracies.
• Withdraw consent for analytics or marketing communications.
• Request deletion of personal data, subject to our retention obligations above.
• Lodge a complaint with the Nigeria Data Protection Bureau.

To exercise any of these rights, email privacy@kavinoqacademy.com. We respond within 30 days.

Changes to this policy

If we materially change how we handle data, we'll update the "last updated" date at the top of this page and notify active registrants by email.