• Data Controller Information

Data Controller: Leading Alpha Technologies Ltd

Company Registration No.: 8403319

Email: [email protected]

• Information We Collect

We collect personal data that you voluntarily provide during registration or participation, including:

• Full name
• Email address
• Phone number
• Payment details (processed by Paystack - we do not store card information)
• Attribution or referral information
• Program-related communications or feedback

We may also automatically collect limited technical information (cookies, IP address, browser type) for analytics and performance optimization.

• Data Retention and Disposal

1. We retain participant data for 12 months after the Bootcamp concludes to manage post- program communication, certification, and support.
2. Data may be retained longer where required by law (e.g., tax or audit purposes).
3. After the retention period, data is securely deleted or anonymized in line with our Data Retention and Disposal Policy.

• Data Sharing and Third Parties

We may share your personal data with trusted third-party service providers who assist us in delivering the Bootcamp, including:

• Payment Processor: Paystack
• CRM and Communication Tools: HubSpot, Airtable, Google Workspace, or similar
• Event Facilitators or Certification Partners

All such third parties act as Data Processors and are bound by written Data Processing Agreements that ensure compliance with the NDPA and NDPR.

We do not sell or rent your personal data to anyone.

• Cross-Border Data Transfer

Where your personal data is transferred or processed outside Nigeria (for example, by our cloudor communication service providers), we ensure that:

• The receiving country provides adequate data protection; or
• Standard Contractual Clauses (SCCs) or other approved safeguards are in place; or
• We obtain NDPB approval for the transfer, as required under Sections 41–42 NDPA.

• Children’s Data

Our Boot-camp is designed for adults aged 18 and above.
If a participant under 18 registers, we require verifiable parental or guardian consent before processing their data, in compliance with Section 31 NDPA 2023.

• Data Security and Breach Notification

We implement administrative, technical, and organizational safeguards to protect your data fromunauthorized access, loss, or misuse.

In the unlikely event of a personal data breach, we will:

• Notify the Nigeria Data Protection Bureau (NDPB) within 72 hours, and
• Inform affected individuals promptly, in accordance with Section 40 NDPA 2023.

• Your Data Protection Rights

Under the NDPA and NDPR, you have the right to:

• Request access to your personal data
• Withdraw consent (for marketing or optional processing)
• Object to processing based on legitimate interest
• Lodge a complaint with the Nigeria Data Protection Bureau (NDPB)

To exercise these rights, contact our DPO via [ DPO Email]. We will respond within 30 days of your request.

• Cookies and Tracking

Our website may use cookies and analytics tools to enhance your browsing experience and improve our services.

You can control or disable cookies through your browser settings. Some features may not function properly if cookies are disabled.

• Data Subject Complaint Procedure

If you have any concerns about how we process your personal data:

• Please first contact our DPO via [Insert Email].
• If unresolved, you may lodge a formal complaint with the Nigeria Data Protection Bureau(NDPB) at https://ndpb.gov.ng.

• Updates to this Policy

We may review and update this Privacy Policy from time to time to reflect legal, operational, or regulatory changes.

The most current version will always be available on our website, and material updates will be communicated via email or other suitable means.