TrustStack Academy official logoTrustStack Academy
PRIVACY & DATA PROTECTION

Privacy Policy

How TrustStack Academy handles learner, payment-reference, learning-progress and website information, and how you can exercise your privacy rights.

Effective 22 September 2026Version 1.0NDPA-focused notice

Overview and controller

Truststack Academy and Educational Services Ltd operates TrustStack Academy and acts as the data controller for information collected through this website, enrolment, learning services, support and certificate verification.

Controller contact: privacy@truststack.academy

Information we collect

Identity and contactName, email, phone, country, and optional employer details.
Learning informationEnrolments, lesson progress, assessments, submissions and support notes.
Technical informationDevice, browser, IP address, security logs and service-error information.
Payment referencesProvider reference, amount and status. We do not store full payment-card details.

Why we use information

  • To create accounts, deliver lessons, labs, assessments and learner support.
  • To process and reconcile enrolments and maintain privacy-aware learner and certificate-verification records.
  • To secure the platform, prevent fraud, diagnose errors and meet legal obligations.
  • For optional communications, surveys or non-essential cookies only where an appropriate choice or lawful basis applies.

Cookies and tracking

Essential storage supports security and core service functions. Analytics, preferences and marketing categories remain optional and are controlled through the cookie panel. Select the fixed Cookies button at any time to change your choice.

CategoryPurposeDefault
EssentialSecurity and core learning sessionsAlways active
AnalyticsAnonymous performance improvementConsent required
PreferencesRemember display and learning choicesConsent required
MarketingOptional programme updatesConsent required

Sharing, transfers and security

We do not sell personal information. We may use vetted hosting, payment, communication and analytics providers where needed to operate the Academy. Appropriate contractual, organisational and technical safeguards are used, including access controls, encrypted connections, logging and incident response.

Where information is transferred internationally, TrustStack assesses the legal mechanism and safeguards appropriate to the transfer.

Retention

Records are kept only as long as necessary for learning services, certificate verification, support, security, accounting and legal obligations. Retention periods are reviewed and information is deleted or anonymised when it is no longer required.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, consent withdrawal or portability, and may complain to the Nigeria Data Protection Commission. Contact our privacy team so we can verify and respond to your request.

Children and third-party services

The services are not directed to children under 18. Course pages may link to third-party services whose privacy practices are governed by their own notices.

Contact the DPO

Email dpo@truststack.academy or privacy@truststack.academy. You may also contact the Nigeria Data Protection Commission.