Privacy notice

Who we are

The British Standards Training Hub is an online professional development service run by GLEC Group ("GLEC Group", "we", "us" or "our"). This notice explains how we collect, use, share and protect personal information when you use this portal (the "Service").

We process personal information in line with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR). GLEC Group is the data controller for the information described here.

Information we collect

We collect only what we need to run the Service:

Account information

• Your name and email address, given when you join or when your school adds you. Optionally your phone number and country.
• Sign-in data. Accounts are passwordless by default: we email you a link to sign in and keep a secure session cookie in your browser.

School information

• For schools that buy seats: the school name, the contact person’s name, email and phone, and the names and emails of teachers the school adds.

Learning information

• The plans and courses you have access to and when that access ends, your lesson progress, quiz results, workbook submissions and the certificates you earn.

Payment information

• Card payments are handled by Paystack. We receive a confirmation and a reference; we never see or store your card details.
• For bank transfers we record the order reference and the amount received.

Technical information

• Basic technical data such as IP address, browser type and the pages you open, used to deliver and secure the Service and to limit abuse.

How we use your information

We use personal information to:

• Create and secure your account and send you sign-in links.
• Give you access to the courses in your plan for the period you paid for, and track your progress.
• Take payments, confirm bank transfers and keep financial records.
• Let a school manage the seats it bought and see which teachers are on them.
• Issue certificates and let others check that they are genuine.
• Send service emails, such as payment confirmations, access reminders and replies to your questions.
• Meet our legal, tax and accounting obligations.

Our legal bases are the contract with you (or your school), our legitimate interest in running and securing the Service, your consent where we ask for it, and our legal obligations.

Schools and teachers

If your school bought your seat, the school’s administrators can see your name, email, the date you were added and when your access ends. They do not see your quiz answers or workbook submissions.

How we share information

We do not sell your personal information. We share it only with service providers who process it for us, under contract:

• Cloudflare: hosting, database and file storage.
• Paystack: card payment processing.
• Resend: delivery of service emails.
• Our video hosting providers: delivery of course video.
• Authorities, where the law requires it or to protect our users and the Service.

Some of these providers may process data outside Nigeria. Where they do, we rely on contractual and technical safeguards so your information stays protected to the standard this notice describes.

Certificates and public verification

Each certificate carries a unique code that anyone can check on our verification page. A check shows the holder’s name as printed on the certificate, the course, the issue date and whether the certificate is still valid.

How long we keep information

We keep your account while it is open. Payment records are kept for as long as tax and accounting law requires. Certificate records are kept so that certificates stay verifiable. When you delete your account we remove your profile, progress and sign-in data; payment records are kept without your account attached.

Security

We use encrypted connections, access controls on course content and private file storage, and limit staff access to what each role needs. No system is perfectly secure, but we work to protect your information and will tell you and the regulator about a breach where the law requires it.

Your rights

Under Nigerian data protection law you can:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct it. You can update your name and phone number yourself on your account page.
• Ask us to delete it. You can delete your account yourself at any time.
• Object to or ask us to restrict some processing, and withdraw consent you have given.
• Complain to the Nigeria Data Protection Commission.

To use any of these rights, email info@glecgroup.com. We may need to confirm your identity first.

Children

The Service is for teachers and other adult professionals. We do not knowingly collect information from children. If you think a child has given us personal information, contact us and we will remove it.

Changes to this notice

We may update this notice. When we do, we change the date at the top, and we will tell you by email about any significant change.

Contact us

Questions about this notice or your information: email info@glecgroup.com. GLEC Group, Nigeria.