Privacy Policy

1. Introduction

Fastlearners Limited (“Fastlearners”, “we”, “our”, or “us”) provides digital learning tools and educational services to students, parents/guardians, teachers, and institutions across Nigeria, Ghana, Sierra Leone, Gambia, and Liberia.

This Privacy Policy explains how we collect, use, store, and protect personal data in compliance with the Nigeria Data Protection Act 2023 (NDPA) and is overseen by the Nigeria Data Protection Commission (NDPC).

We encourage parents and guardians of children under the age of 18 to review our Children's Data Protection Policy to understand how we safeguard the privacy of our younger users.

2. Information We Collect

We may collect the following categories of personal data:

We do not collect sensitive personal data (e.g., biometric data, genetic data, or political opinions) unless strictly necessary for specific features and with your explicit consent.

3. Lawful Bases for Processing Personal Data

We process personal data based on the following legal grounds:

• Performance of a contract — to provide access to the Platform and educational services.
• Legitimate interests — to improve services, personalise learning, conduct analytics, and ensure security.
• Consent — where required, especially for children's data, direct marketing, or optional features.
• Legal obligation — to comply with applicable laws and regulatory requirements.

For children under the age of 18, we rely on parental or guardian consent in accordance with Section 31 of the NDPA and GAID 2025.

4. How We Use Personal Data

• To create and manage user accounts
• To deliver learning content and interactive exercises
• To analyze academic progress and provide feedback
• To personalize user experience and recommendations
• To provide customer support and troubleshooting
• To process payments and generate transaction records
• To detect and prevent fraud, cheating, or misuse of the Platform
• To comply with regulatory obligations

We do not sell, trade, rent, or commercially exploit your personal data for marketing purposes.

5. Children's Data

Protecting the privacy of children is our priority. We collect personal data from users under the age of 18 only with the express consent and supervision of a parent or legal guardian.

Parents or guardians may request to:

• Review the data we have collected about their child
• Request corrections to inaccurate data
• Request the deletion of their child's personal data
• Withdraw consent for future data collection

For more information, please see our dedicated Children's Data Protection Policy.

6. Data Sharing and Third Parties

We may share your data with the following categories of third parties:

• Secure hosting and cloud infrastructure providers
• Data analytics and performance monitoring services
• Payment processors for transaction handling
• Educational partners or institutions (where you have authorised sharing)

All third parties are required to sign binding Data Processing Agreements (DPAs) that comply with the NDPA. We do not share data with third parties for their own marketing purposes.

7. International Data Transfers

To provide our services, your personal data may be stored or processed in countries outside of Nigeria. When transferring data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Other NDPC-approved mechanisms
• Adequacy decisions (where available)

We only use cloud providers and data centres that meet the security standards approved by the Nigeria Data Protection Commission (NDPC).

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law:

• Active accounts: retained for the duration of your relationship with us
• Inactive accounts: archived or deleted after 24 months of inactivity
• Children's data: deleted upon reaching adulthood or upon parental request (subject to legal requirements)

You may request deletion of your data at any time (subject to legal retention obligations).

9. Your Rights as a Data Subject

Under the NDPA, you have several rights regarding your personal data:

• Right to be informed about how your data is used
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (the "right to be forgotten")
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with the NDPC

To exercise any of these rights, please contact us at the details below. We will respond within one (1) month (or as required by law).

10. Data Security

We implement robust technical and organisational measures to protect your data, including:

• End-to-end encryption for sensitive data
• SSL/TLS encryption for all data in transit
• Role-based access controls (RBAC)
• Regular security assessments and audits
• Staff training on data protection

However, no system is completely secure. We encourage you to keep your login credentials confidential and notify us immediately of any suspected unauthorised access.

11. Data Protection Officer (DPO)

We have appointed a Data Protection Officer to oversee our compliance with the NDPA and handle any privacy-related enquiries.

12. Contact Us

You may also contact the Nigeria Data Protection Commission (NDPC) if you are not satisfied with our response.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the effective date.