Techlytics Institute of Technology: Privacy and Cookie Policy
Contents
Part A: Privacy Policy
1. About this policy
This policy explains how Techlytics Institute of Technology and Innovation ("TIT", "we", "us", "our") collects, uses, shares and protects personal data when you visit our website, use our learning portal (the "Portal"), apply for or attend our Programmes, subscribe to our updates, or work with us as a Client, Sponsor, partner or supplier.
We process personal data in line with the Nigeria Data Protection Act 2023 ("NDPA") and the NDPA General Application and Implementation Directive 2025 ("GAID"). Capitalised terms not defined here have the meaning given in our Terms and Conditions. Where this policy cannot practically be shown to you, for example at an in-person event, our team will explain it to you or give you a printed summary on request.
2. Who is responsible for your data
TIT is the data controller for the personal data described in this policy.
- Controller: Techlytics Institute of Technology and Innovation, a company limited by guarantee (RC 9649199), 52 Balarabe Musa Crescent, Victoria Island, Lagos.
- Data Protection Officer: Oluwatayo Winkunle (Interim Data Protection Officer), contact@techlytics.ai, 07045259977.
- NDPC registration: Our affiliated service provider, Techlytics Africa Ltd (RC 1856284), supports our operations under a management services agreement and processes personal data on our behalf. Techlytics Africa Ltd is registered with the Nigeria Data Protection Commission as a data controller and processor of major importance (Registration ID NDPC/DCP/06462, valid 19 February 2026 to 19 February 2028).
When we process data supplied by a Client for its own purposes, such as an internal dataset used in an applied project, we act as that Client's data processor and the Client's own privacy notice also applies.
3. Personal data we collect
| Category | Examples |
|---|---|
| Identity and contact | Name, email address, phone number, gender, age or date of birth, state or country of residence |
| Professional and educational | Employer, job title, department, years of experience, qualifications, CV, LinkedIn profile |
| Applications and eligibility | Application answers, entry assessment results, eligibility information a Sponsor requires |
| Learning records | Attendance, participation, assignments, project work, assessment scores, feedback, certificates issued |
| Portal and AI assistant | Account details, course progress, quiz results, messages and prompts sent to the AI assistant, support requests |
| Billing and stipends | Billing contacts and invoicing details of Clients and Sponsors; for stipends TIT disburses, the Learner's bank name, account name and account number |
| Images and recordings | Photographs, video and recordings of sessions, events and demonstrations |
| Technical data | IP address, device and browser type, cookie identifiers, pages visited, referral source (see Part B) |
| Communications and marketing | Enquiries, emails, event and webinar registrations, newsletter subscriptions and preferences, survey responses |
| Business contacts | Names, roles and contact details of staff at Clients, Sponsors, partners and suppliers |
Sensitive personal data. We collect sensitive personal data (as defined in section 30 of the NDPA, such as health information) only where it is needed and with your explicit consent or another basis the NDPA permits. Examples are health or disability information you choose to share so we can make reasonable adjustments, and information a Sponsor requires to confirm eligibility for a Programme designed for a particular group.
4. How we collect it
- From you, when you enquire, register, apply, attend, submit work, use the Portal, complete surveys or contact us.
- From your employer, when a Client nominates you for a Programme.
- From Sponsors and partners, such as universities, professional associations and programme funders that refer or admit Learners.
- Automatically, through cookies and similar technologies on our website and Portal, as described in Part B.
- From public sources, such as professional networking profiles, for business contacts.
5. How we use it and our lawful basis
Section 25 of the NDPA requires a lawful basis for each use of personal data. We rely on the following.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and preparing proposals | Steps taken at your request before a contract; legitimate interests |
| Assessing applications and admitting Learners | Contract; consent for any sensitive personal data |
| Delivering Programmes, running the Portal, assessing work and issuing certificates | Contract |
| Reporting attendance, progress and results to the Client or Sponsor funding your place | Contract with the Client or Sponsor; legitimate interests in accountable delivery |
| Disbursing stipends where TIT administers them | Contract |
| Providing and safeguarding the Portal AI assistant | Contract; legitimate interests in safety and course improvement |
| Verifying certificates to third parties | Legitimate interests |
| Sharing your profile with partner employers for placement | Consent |
| Programme evaluation and impact reporting, aggregated where possible | Legitimate interests; contract with the Sponsor |
| Newsletters, event invitations and programme updates | Consent, or legitimate interests for existing contacts about similar services, with an opt-out in every message |
| Using your image or testimonial in promotional material | Consent |
| Non-essential cookies (Part B) | Consent |
| Invoicing, accounting and tax | Legal obligation; contract |
| Security, fraud prevention and protecting our systems | Legitimate interests |
| Meeting legal and regulatory requirements and handling disputes | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have weighed our interests against your rights and you may object at any time (see section 10). Where we rely on consent, you may withdraw it at any time without affecting processing that took place before withdrawal.
6. AI features and automated decisions
Portal AI assistant. Messages you send to the Portal's AI assistant are processed by our AI provider (currently Anthropic) to generate responses. We keep conversations for 12 months and authorised TIT staff may review them to support Learners, keep the service safe and improve our courses. Our provider is contractually barred from using Portal conversations to train its models.
Automated decisions. We may use AI tools to help screen applications or mark assessments. A member of our team reviews any decision that significantly affects you, such as admission, certification or stipend eligibility. Under section 37 of the NDPA, you may ask for human review of any such decision, express your view and contest it.
7. Who we share it with
- Your employer (the Client): attendance, participation, assessment results, completion status and feedback summaries.
- Sponsors and funders: the same information, plus eligibility and outcome data needed for programme reporting, aggregated or de-identified where the report allows.
- Partner institutions and certification bodies: to co-certify Programmes and verify certificates.
- Partner employers: for placement and career pathways, with your consent.
- Service providers acting on our instructions: Techlytics Africa Ltd (operations, finance and technical support under a management services agreement); Zoho (CRM, email, campaigns, forms, file storage and meetings); Google Workspace; Anthropic (Portal AI assistant); analytics and advertising providers named in Part B; video hosting and conferencing providers; payment and banking providers; event venues; contracted facilitators and instructors; and professional advisers such as lawyers, auditors and accountants.
- Regulators, law enforcement and courts: where the law requires it.
- A successor organisation: in a restructuring, merger or transfer of our activities, under equivalent protections.
We do not sell personal data. Each service provider processes data under a written agreement that meets section 29 of the NDPA.
8. International transfers
Some of our service providers store or process data outside Nigeria. We transfer personal data abroad only as Part VIII of the NDPA permits: to countries or organisations with adequate protection, under appropriate safeguards such as contractual clauses, or on another lawful basis such as your consent or the performance of a contract with you. You may ask us for details of the safeguards in place.
9. How long we keep it
| Record | Retention period |
|---|---|
| Enquiries and leads not progressed | 2 years after last contact |
| Applications not admitted | 12 months after the decision |
| Learner records (enrolment, attendance, assessments) | 6 years after the Programme ends |
| Certificate records (name, Programme, date, certificate ID) | Kept long term so we can verify certificates |
| Portal accounts | Until closed, or after 24 months of inactivity, then deleted or anonymised |
| AI assistant conversations | 12 months |
| Session recordings | 24 months, unless used as course Materials with consent |
| Promotional images and testimonials | Until consent is withdrawn or the material is retired |
| Financial, invoicing and stipend records | At least 6 years, as tax and company law require |
| Marketing lists | Until you unsubscribe; we keep a suppression record so we do not contact you again |
| Client, Sponsor, partner and supplier contacts | For the relationship plus 6 years |
| Cookie data | As listed in Part B |
At the end of each period we delete or anonymise the data, unless the law requires us to keep it longer.
10. Your rights
Under the NDPA you have the right to:
- be informed about how we use your personal data;
- access a copy of your personal data;
- have inaccurate or incomplete data corrected;
- have your data erased where we no longer have a lawful reason to keep it;
- restrict our processing in certain circumstances;
- object to processing based on legitimate interests, and to direct marketing at any time;
- receive your data in a structured, commonly used format and have it sent to another controller (data portability);
- withdraw consent at any time, including consent to cookies;
- not be subject to a decision based solely on automated processing that significantly affects you; and
- lodge a complaint with the Nigeria Data Protection Commission through the channels on its website, ndpc.gov.ng.
To exercise any right, email contact@techlytics.ai with the subject line "Data Request". We will verify your identity and respond within 30 days. There is no charge unless a request is manifestly unfounded or excessive.
If a Client or Sponsor funds your place, some reporting to them is part of the contract for your Programme. If a request affects that reporting, we will explain what we can and cannot change.
11. How we protect it
We use technical and organisational measures appropriate to the risk, including role-based access controls, multi-factor authentication, encryption in transit, staff confidentiality obligations and data protection training, and due diligence on our service providers.
If a personal data breach is likely to put your rights and freedoms at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and we will tell you without undue delay where the risk to you is high, with the steps you can take to protect yourself.
12. Children
Our website, Portal and Programmes are intended for people aged 18 and over. Where a Programme admits Learners under 18, we obtain consent from a parent or guardian and take reasonable steps to verify age, as section 31 of the NDPA requires. If we learn that we have collected a child's data without that consent, we will delete it.
13. Marketing choices
Every marketing email carries an unsubscribe link. You can also opt out by writing to contact@techlytics.ai. After you opt out, you will still receive service messages about Programmes you are enrolled in.
14. Changes to this policy
We may update this policy as our services or the law change. We will publish the updated version with a new date and, for material changes, notify registered users by email before the change takes effect.
Part B: Cookie Policy
15. What cookies are
Cookies are small text files a website places on your device when you visit. Similar technologies include pixels, tags, local storage and software development kits. In this Part, "cookies" covers all of them. Cookies set by TIT are first-party cookies; cookies set by another company through our site, such as an analytics or video provider, are third-party cookies.
This Cookie Policy applies to our website and the Portal.
16. How we use cookies
| Category | What it does | Typical duration | Your consent |
|---|---|---|---|
| Strictly necessary | Keeps you signed in to the Portal, secures forms and logins, balances traffic, and remembers your cookie choices | Session to 12 months | Not required; the site cannot work without them |
| Functional | Remembers preferences such as language, video playback settings and course progress display | Up to 12 months | Required |
| Analytics | Tells us which pages and courses are used, how visitors find us and where they drop off, so we can improve the site and our courses | Up to 24 months | Required |
| Marketing | Measures the results of our advertising and shows TIT adverts to people who have visited our site, on platforms such as LinkedIn and Meta | Up to 13 months, or as the provider sets | Required |
| Embedded content | Lets videos, booking tools and forms from third parties load inside our pages; those providers may set their own cookies | As the provider sets | Required where the provider sets non-essential cookies |
17. Your consent and choices
When you first visit, our cookie banner lets you accept all cookies, reject all non-essential cookies, or choose by category. Rejecting is as easy as accepting, and we set non-essential cookies only after you have agreed to them. Pre-ticked boxes and continued browsing do not count as consent.
We keep a record of your choice so we can show that consent was given. You can change or withdraw your consent at any time.
You can also block or delete cookies in your browser settings. Help pages for the main browsers are published by Google (Chrome), Apple (Safari), Mozilla (Firefox) and Microsoft (Edge). Blocking strictly necessary cookies may stop parts of the Portal from working, including sign-in.
To opt out of interest-based advertising on a specific platform, use that platform's ad settings, such as LinkedIn's or Meta's ad preferences.
18. Third-party cookies
Third-party providers decide how they use the data their cookies collect, under their own privacy policies. We choose providers that offer data protection terms and, where available, settings that limit data use, such as IP anonymisation for analytics. Data collected by third-party cookies may be processed outside Nigeria under the safeguards in section 8.
19. Changes to this Cookie Policy
We will update this Part when we add, remove or change cookies, and will ask for your consent again where a change introduces a new category of non-essential cookie.
Contact us
Interim Data Protection Officer, Techlytics Institute of Technology and Innovation 52 Balarabe Musa Crescent, Victoria Island, Lagos contact@techlytics.ai | 07045259977