SUNIMTECH

Privacy Policy

Privacy Policy

Last updated: October 2026

This Privacy Policy explains what personal data the Sun Institute of Media and Technology (SUNIMTECH) collects through this platform, why we collect it and how it is protected. It is written to comply with Nigeria's Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).

What we collect

  • Account details: your name, email address and password. Passwords are never stored in plain text, they are handled entirely by our authentication provider's industry standard hashing.
  • Application and enrolment data: the course you apply for, your application status and your progress through course content.
  • Payment records: the amount, date and status of each transaction (acceptance fee, course fee, instalments). We do not store your card number, CVV or banking credentials. Card payments are processed directly by our payment partners, Paystack and Flutterwave, on their own secure, PCI compliant systems.
  • Certificates and skills data: your completion status, certificate codes and, only if you choose to opt in, a public bio, skills list and project showcase displayed alongside your certificate verification page.
  • Optional uploads: a profile photo, if you choose to add one.

How we use it

We use your data to review and process your application, operate the acceptance fee and course fee payment flow, unlock course content as you progress, issue and verify certificates, send transactional emails such as application updates, payment receipts and certificate notifications, and provide account support when you reach out to us.

We do not sell your personal data, and we do not use it for third party advertising.

Who else sees it

Your data is processed by a small number of infrastructure providers acting on our behalf, each bound to use it only to provide their service to us.

  • Supabase, for our database, authentication and user records.
  • Cloudflare, for hosting, file storage and security at the network level.
  • Paystack and Flutterwave, for processing course payments.
  • Resend, for delivering transactional emails such as receipts and certificate notifications.

We do not share your data with any other third party except where required by law.

Your rights

Under the NDPA, you can ask us to confirm what data we hold about you, correct inaccurate data, delete your data subject to our legitimate need to retain financial and academic records, and withdraw your consent to the public certificate profile at any time, which immediately stops showing your bio, skills and projects publicly. To exercise any of these rights, email admissions@sunimtech.com.

How long we keep it

We keep account and academic records for as long as your account is active, and payment records for as long as Nigerian tax and financial regulations require afterward. Certificate verification data is kept indefinitely so credentials remain checkable by employers in the future.

Cookies

We use only the minimal session cookies required to keep you signed in and to remember your light or dark theme preference. We do not use third party advertising or tracking cookies.

Children's privacy

This platform is intended for learners preparing for or already active in the workforce. It is not directed at children, and we do not knowingly collect data from anyone under 13 without a parent or guardian's consent.

Changes to this policy

If we make material changes to this policy, we will update the "last updated" date above and, where appropriate, notify active students by email.

Contact

Questions about this policy or how your data is handled can be sent to admissions@sunimtech.com.