Privacy policy

Who is responsible for your data

New Horizons Nigeria is responsible for the personal data it controls in this portal. Where you are enrolled through a university, school or employer, the respective responsibilities of New Horizons Nigeria and that sponsor depend on the training agreement and how each organisation determines the use of the data.

Questions about this policy, or requests about your data, go to the training office using the details on our contact page.

What we collect

We collect only what is needed to deliver, assess and certify training:

• Identity and contact: name, email address, phone number, and your student number.
• Enrolment: programme, cohort, centre or institution, and — where relevant — matric number, faculty, department, level, class or year.
• Corporate learners: staff ID and job title provided by your employer.
• School learners: age group, class, and a parent or guardian's name, phone number and email.
• Payment: the amount, bank, depositor name, transaction reference, payment date, and the evidence document you upload.
• Learning: attendance marks, examination attempts and answers, results, and course evaluations.
• Certification: certificate records including snapshots of your name, programme and centre at the time of issue, plus hard-copy delivery details.
• Documents: any file you or the office uploads to your private document area.
• Technical: sign-in times, IP address and browser agent recorded in the audit log, and a record of each certificate verification.

Children and school programmes

Some programmes are delivered to primary and secondary school learners. For those learners we collect data through the school, and we require a parent, guardian or the school acting in loco parentis to consent.

For school learners we deliberately hold less: no payment evidence in the learner's own name, and guardian contact details instead of direct marketing contact. Content for these programmes is flagged child-safe.

A parent, guardian or the school may ask to see, correct or delete a child's record using the contact details on our contact page. A deletion request may be limited where a record must lawfully be retained.

Why we may use it

We rely on the following grounds: performance of our training agreement with you (delivery, assessment, certification); our legitimate interests (running centres safely, preventing payment fraud, keeping an audit trail); consent (for a child's data, and for optional communications); and legal obligation (accounting and tax records).

We do not sell personal data, and we do not use learner data for automated decision-making that produces a legal effect on you. Certificate eligibility is calculated automatically, but the underlying attendance, results and payment records are all recorded by people and can be checked and corrected.

Who can see it

Access inside New Horizons is limited by role: audit officers see payment evidence; instructors see the learners on their own cohorts; certificate officers see certification records; unit managers and coordinators see only their own business unit.

Where you are sponsored, we share attendance, completion and certification reports with the sponsoring institution or employer. We do not share your payment evidence with them unless they made the payment.

Anyone you give a certificate number to can confirm that certificate, seeing only the details listed in our terms of use.

We use an email delivery provider to send portal notices. We do not otherwise transfer your data outside Nigeria without a lawful basis.

How long we keep it

Certificate records are kept indefinitely, because a certificate must remain verifiable for the holder's lifetime of use.

Payment evidence and financial records are kept for the period required by Nigerian tax and accounting law, then deleted.

Attendance, examination and evaluation records are kept for the duration of the programme and for a reasonable period afterwards to resolve queries and appeals.

Uploaded personal documents are deleted on request, unless we must keep them for the reasons above.

How it is protected

Payment evidence, personal documents and generated certificates are stored outside the public web root and are served only to signed-in users whose role permits it.

Passwords are stored only as salted hashes and are never visible to staff. Sign-in and certificate verification are rate limited. Every sensitive action is written to an audit log.

Your rights

Under the Nigeria Data Protection Act you may ask us to give you a copy of your data, correct it, delete it where we have no continuing need, restrict or object to certain processing, or withdraw consent where consent is what we relied on.

Contact the training office to exercise any of these. We will respond within the time required by applicable law. If you are not satisfied, you may complain to the Nigeria Data Protection Commission.