Privacy policy

Last updated

This policy explains what we collect when you use JST Academy, why we collect it, who else sees it, and the control you have over it. We only collect what we need to run the platform for you.

01Who controls your data

Journeying Storyteller (“JST Academy”, “we”, “us”) is the data controller for the personal data described here. For any privacy question or request, contact us at privacy@journeyingstoryteller.com.

02What we collect

We collect the following, depending on how you use the platform:

  • Account details you give us: your name, email address, and a securely hashed password. We never store your password in readable form.
  • Learning activity: the courses you enrol in, your progress, quiz attempts, and certificates you earn.
  • Payment records: a record that a payment was made and for what. Your full card details are handled by our payment provider, not by us.
  • Instructor details, if you publish courses: the content you upload and the payout information you provide.
  • Technical data: your IP address, device and browser information, and basic usage logs needed to keep the service secure and working.

03Why we use it

We use your data to:

  • create and run your account and give you access to the courses you enrol in;
  • process payments and pay out instructor earnings;
  • issue certificates and let them be verified;
  • send you service messages about your account, courses, and receipts;
  • keep the platform secure and diagnose problems;
  • understand how the platform is used so we can improve it;
  • send marketing email only where you have agreed to receive it.

04Legal basis

We rely on your agreement to our terms (contract) to run your account and deliver courses you bought, our legitimate interest to keep the service secure and to improve it, your consent for optional analytics and marketing email, and our legal obligations for keeping financial records. Nigeria’s Data Protection Act applies to this processing, and where you are in the European Union the GDPR applies too.

05Who we share it with

We do not sell your data. We share it only with the service providers we need to run the platform, and only with what each one needs:

  • Paystack, to process payments and instructor payouts;
  • Cloudflare, to store and deliver course media and files;
  • our hosting provider, where the application and databases run;
  • our email and analytics providers, to deliver messages and understand usage.

We may also disclose data where the law requires it, or to protect our rights, our users, or the public.

06Cookies

We use a session cookie to keep you signed in; the platform cannot work without it. Where we use analytics cookies to understand usage, we ask for your consent first and you can withdraw it at any time. We do not use cookies to build advertising profiles of you.

07How long we keep it

We keep account and learning data while your account is open, and for a short period after you close it in case you return or a dispute arises. We keep financial records for the minimum period the law requires. Certificate records are kept for as long as they may need to be verified. When data is no longer needed, we delete it or make it anonymous.

08Your rights

You can ask us to:

  • give you a copy of the data we hold about you;
  • correct data that is wrong or out of date;
  • delete your data, where we are not required to keep it;
  • export your data in a portable form;
  • object to or restrict certain processing;
  • withdraw consent you previously gave, at any time.

To exercise any of these, email privacy@journeyingstoryteller.com. We respond within one month, and we will not charge you or treat you differently for asking.

09International transfers

Some of our providers process data outside Nigeria, including in the European Union. Where your data is transferred abroad, we rely on providers that offer an adequate level of protection and on contractual safeguards, in line with the requirements of Nigeria’s Data Protection Act and, where relevant, the GDPR.

10Children

You must be at least 13 to hold an account, and anyone under 18 needs the consent and involvement of a parent or legal guardian. We do not knowingly collect data from children below the minimum age. If we learn that we have, we delete it. A parent or guardian who believes we hold a child’s data can contact us to have it removed.

11How we protect it

We protect your data with encryption in transit, hashed passwords, access controls that limit who can see what, and restricted, signed access to course media. No system is perfectly secure, but we work to keep your data safe and will notify you and the relevant authority of a serious breach as the law requires.

12Changes and contact

We may update this policy from time to time and will post the new date above, telling you by email or a notice on the platform if a change is material. For any privacy question, request, or complaint, contact Journeying Storyteller at privacy@journeyingstoryteller.com. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission, or to your local data protection authority if you are outside Nigeria.