This Privacy Policy explains what personal data the LW School of Commerce collects from users of the platform, how we use it, and the rights you have over it. This policy applies to all users of school.lwcommerce.org. |
The data controller for the LW School of Commerce platform is the Ministry of Commerce, LoveWorld Nation. You may contact us at privacy@lwcommerce.org with any privacy-related enquiry or request.
We collect personal data in the following categories:
Data Category | What It Includes |
Identity Data | Full name, username, profile photograph, date of birth (for age verification), and nationality. |
Contact Data | Email address, phone number, and postal address where provided. |
Account Data | Login credentials (encrypted), account preferences, language settings, and notification preferences. |
Payment Data | Payment card details (tokenised via Stripe/Paystack — we do not store raw card data), billing address, and transaction history. |
Learning Data | Course enrolment records, lesson completion status, quiz scores, assignment submissions, certification records, and platform usage patterns. |
Communication Data | Messages sent through the platform's instructor-student messaging system, emails to our support team, and community forum posts. |
Technical Data | IP address, device type, browser type, operating system, session duration, and pages visited, collected via standard web analytics tools. |
Corporate Data | For institutional accounts: organisation name, designated administrator details, and employee roster where provided. |
We process your personal data for the following purposes and on the following legal bases:
Purpose | Legal Basis |
Account creation and management | Performance of contract — to create and maintain your learner or instructor account. |
Course delivery and progress tracking | Performance of contract — to deliver the educational services you have enrolled in. |
Payment processing and billing | Performance of contract — to process transactions and manage subscription billing cycles. |
Certification issuance | Performance of contract — to assess, validate, and issue your course certifications. |
Platform communications | Legitimate interest — to send transactional emails (receipts, access confirmations, platform notices). |
Marketing communications | Consent — to send newsletters, course announcements, and promotional materials where you have opted in. |
Platform improvement and analytics | Legitimate interest — to understand usage patterns and improve the learning experience. |
Security and fraud prevention | Legitimate interest — to protect the integrity of the platform and the accounts of our users. |
Legal compliance | Legal obligation — to comply with applicable laws, regulations, and court orders. |
We do not sell your personal data. We share it with the processors listed below, and only to the extent each processor needs it for its stated purpose:
Third Party | Purpose |
Stripe / Paystack | Payment processing. Your payment data is handled under their respective data processing agreements. |
Bunny.net | Secure video delivery and content distribution across our global CDN nodes. |
Mailchimp | Student email communications, including course updates and newsletter distribution. |
HubSpot | CRM and learner relationship management, used internally by the Ministry. |
Cloudflare | Global content delivery, DDoS protection, and network security. |
Platform Infrastructure (VPS) | Hosting in Lagos, Frankfurt, Virginia, Singapore, and Nairobi/Dubai nodes. |
All third-party processors are bound by data processing agreements that require them to handle your data in accordance with applicable privacy law and consistent with this policy.
Given the global nature of the LoveWorld Nation, your data may be processed at infrastructure nodes in Nigeria, Germany, the United States, Singapore, and Kenya or the UAE. Where data is transferred outside your country of residence, we ensure appropriate safeguards are in place, including standard contractual clauses and transfers to jurisdictions with adequate data protection frameworks.
We retain your personal data for as long as is necessary for the purposes set out in this policy, or as required by law. The following default retention periods apply:
Data Type | Retention Period |
Account data | Duration of active account plus 3 years after account closure. |
Payment and transaction records | 7 years, in accordance with financial record-keeping obligations. |
Learning and certification records | Indefinitely, to support certification verification requests. |
Marketing communications data | Until you withdraw consent or unsubscribe. |
Technical / analytics data | 12 months on a rolling basis. |
Support communications | 3 years from last interaction. |
Depending on your country of residence, you may have the following rights in relation to your personal data:
• Right of Access — to obtain a copy of the personal data we hold about you.
• Right to Rectification — to request correction of inaccurate or incomplete data.
• Right to Erasure — to request deletion of your personal data where there is no lawful basis for continued processing.
• Right to Restriction — to request that we limit our processing of your data in certain circumstances.
• Right to Data Portability — to receive your data in a structured, machine-readable format.
• Right to Object — to object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent — where processing is based on your consent, to withdraw that consent at any time.
To exercise any of these rights, please submit a request to privacy@lwcommerce.org. We will respond within 30 days. We may need to verify your identity before processing your request.
The Platform uses cookies and similar technologies to operate the platform, remember your preferences, and understand how the platform is used. The following cookie categories are in use:
Cookie Type | Purpose |
Strictly Necessary | Essential for the platform to function. Cannot be disabled. Includes session management, login persistence, and security tokens. |
Functional | Remember your preferences such as language, video quality, and interface settings. |
Analytics | Collect anonymised usage data to help us understand and improve the platform experience. |
Marketing | Used where you have opted in to receive targeted communications. May include third-party advertising pixels. |
You can manage your cookie preferences at any time via the cookie settings panel accessible in the platform footer.
We implement industry-standard technical and organisational security measures to protect your personal data. These include TLS encryption for all data in transit, AES-256 encryption for data at rest, role-based access controls limiting staff access to personal data, regular penetration testing and security audits, DDoS protection via Cloudflare Enterprise, and video content watermarking for content protection.
No security setup eliminates risk entirely. If a data breach affects your rights or freedoms, we will notify you and, where required, the relevant supervisory authority within 72 hours of becoming aware of it.
The Platform is not directed at children under 16. We do not knowingly collect personal data from persons under 16 years of age. If we learn that a user is under 16, we will suspend the account pending consent from a parent or guardian. If you believe a child under 16 has created an account, please contact us at privacy@lwcommerce.org.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform capabilities. We will notify you of material changes via email or platform notification at least 14 days before the revised policy takes effect. The policy effective date at the top of this document will always reflect the most recent revision.
Channel | Detail |
Privacy Enquiries | privacy@lwcommerce.org |
Data Controller | Ministry of Commerce, LoveWorld Nation |
Platform | school.lwcommerce.org |