Privacy Policy

Template — requires legal review before launch. This document is a starting draft. Items in [square brackets] must be completed, and the whole text reviewed by a qualified legal adviser for the jurisdictions you operate in.

Last updated: [date]

This Privacy Policy explains how [Hiveweb Technologies legal entity name] ("Hiveweb", "we", "us") collects and uses personal information when you use our website, Hiveweb Academy and related services.

Who we are

[Legal entity name], [registration number], [registered address]. Contact for privacy questions: [privacy contact email].

Information we collect

Account information — name, email address, password (stored only as a secure hash), timezone and profile details you choose to add.
Learning records — courses you enrol in, lesson progress, quiz attempts and scores, assessment submissions and certificates issued.
Orders and payments — what you bought, amounts, currency and order status. Card and bank details are entered directly with our payment providers ([Paystack / Stripe]); we do not receive or store full card numbers.
Bookings — training sessions you book and attendance records.
Enquiries — information you send through our contact, corporate training or consultation forms.
AI Opportunity Assessment — your answers, stored without contact details.
Technical information — security logs and a keyed hash of your IP address used for rate limiting and fraud prevention. [Describe any analytics tools once configured.]

How we use information

To provide courses, track progress and issue certificates.
To process payments, grant course access and send receipts.
To manage training bookings, reminders and attendance.
To respond to enquiries and provide quotes.
To keep the platform secure and prevent abuse.
To send marketing messages only where you have opted in. You can withdraw consent at any time.

Legal bases

[Set out the legal bases relied on under applicable law — for example contract, legitimate interests, consent and legal obligation — with reference to the data protection laws that apply to you, such as the Nigeria Data Protection Act 2023 and/or the UK/EU GDPR.]

Sharing

We share information only with service providers who help us run the platform — [hosting provider], [database provider], [payment providers], [email provider], [video hosting provider], [meeting provider] — under contracts that require them to protect it. We do not sell personal information.

International transfers

[Describe where data is stored and processed and the safeguards for transfers outside your country.]

Certificate verification

If you earn a certificate, anyone with its unique ID can see your name as printed on the certificate, the course title and the completion date on our verification page.

Retention

[State how long each category is kept, e.g. account and learning records for the life of the account plus [x] years; financial records for [x] years as required by law.]

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your information, to object to or restrict processing, and to withdraw consent. Contact [privacy contact email]. You may also complain to [the relevant data protection authority].

Security

We use encryption in transit, hashed passwords, role-based access controls and database-level access restrictions. No system is perfectly secure; we will notify you and regulators of breaches where required by law.

Changes

We will post updates on this page and notify registered users of significant changes.