Privacy Policy

The Creators College Limited (RC 7090435), a company registered in Nigeria, is the data controller. Contact us at hello@olodouniversity.com for anything in this policy, including to exercise your rights.

We handle personal data under the Nigeria Data Protection Act 2023 and, where you are in the UK or EEA, the UK GDPR and EU GDPR.

• Registration: name, email, phone, date of birth, state, country.
• Payment: amount, reference, status and card type. We never see or store your card number — that stays with Paystack.
• Coursework: links to content you publish, your own analytics figures, and your written reflections.
• Creator accounts: your handles, profile links and whether two-factor authentication is on. Never passwords or one-time codes.
• Waitlist: name, email, phone, state, main platform.
• Sponsors: name, organisation, contact details.
• Technical: IP address and basic device information, from our hosting provider's standard logs.

We collect date of birth solely to enforce the 18+ rule. We do not knowingly collect data from anyone under 18.

• To deliver the programme you paid for — performance of a contract.
• To assess your work and run selection — performance of a contract.
• To send service emails (receipts, sign-in links, access, results) — performance of a contract.
• To keep accounting and tax records — legal obligation.
• To improve the programme and prevent fraud — our legitimate interests.
• Marketing emails, and showing your name or progress to a sponsor — your consent, which you can withdraw at any time.

If your place is funded by a sponsor, that sponsor sees aggregate numbers only by default — how many seats were redeemed, how many are active. Your name, photograph, progress and story are shown to a sponsor only if you separately opt in, and you can withdraw that at any time from your portal.

We use a small number of processors, each under contract:

• Supabase — database and sign-in (EU, Ireland region)
• Vercel — website hosting
• Paystack — payments (Nigeria)
• Resend — email delivery (EU region)
• Telegram and WhatsApp — community access, under their own policies

We do not sell your data. We do not share it with advertisers. We share it with authorities only where the law requires it.

Our database and email provider are hosted in the European Union; our payment provider is in Nigeria. That means data may move between Nigeria and the EU. Transfers rely on standard contractual clauses or an equivalent safeguard, and on Nigeria's framework for cross-border transfer under the NDPA 2023.

• Financial records — 6 years, as tax law requires.
• Enrolment and coursework — 3 years after the cohort ends, so we can verify certificates.
• Waitlist — until you unsubscribe, or 2 years without engagement.
• Support tickets — 12 months.

You can ask us to:

• show you a copy of your data
• correct anything wrong
• delete it, where we are not required to keep it
• stop or limit a particular use
• send it to you or another provider in a portable format
• withdraw consent you previously gave
• object to processing based on our legitimate interests

Email hello@olodouniversity.com. We respond within 30 days and it costs you nothing.

Unhappy with our answer? In Nigeria you may complain to the Nigeria Data Protection Commission. In the UK, the Information Commissioner's Office. In the EEA, your national supervisory authority.

Data is encrypted in transit and at rest. Access is restricted by row-level security, so one student cannot see another's work. Sign-in uses one-time email links rather than passwords, so there is no password to steal.

No member of our staff, mentors or partners will ever ask you for a password, a one-time code, or admin access to your accounts. If someone claiming to be us asks, refuse and tell us immediately.

If a breach occurs that is likely to affect your rights, we will notify the relevant authority within 72 hours and tell you directly where required.

We use only what is necessary: a sign-in cookie to keep you logged in, and basic hosting logs. We do not use advertising or cross-site tracking cookies. If we add analytics later, this policy will say so first.

If we change this policy in a way that materially affects you, we will email you before it takes effect.