Privacy Policy

Introduction

At CAIC, your privacy is a top priority. We are committed to protecting your personal data and handling it responsibly, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable global privacy frameworks. This statement outlines how we collect, process, store, and share your information when you interact with our website and digital services. We also take cues from the privacy protocols and transparency frameworks employed by Google, Apple, Microsoft, and other global leaders, and we apply these to strengthen our data governance and security practices.

Who We Are

Controller: Christ Ambassadors International College

Email: info@christambassadorscollege.com

We are the Data Controller, meaning we decide how and why your personal data is processed in relation to this website and any associated services.

What Personal Data We Collect

We collect the following categories of personal data, either directly from you or via automated means:

a) Information You Provide Directly

Name
Email address
Phone Number
Job title and organisation
Account login credentials (for registered users)
Any data shared via forms, chats, event registrations, or email correspondence

b) Automatically Collected Data

IP address
Browser type and version
Operating system
Device information
Referring and exit pages
Time spent on site, clickstream data
Location data (approximate, via IP)

c) Cookies and Tracking

We use first-party and third-party cookies and similar technologies to improve userexperience, gather analytics, and personalise content.

Legal Basis for Processing

We process personal data based on one or more of the following legal bases:

Consent: When you explicitly agree to the use of your data (e.g. marketing, newsletters).
Contractual necessity: To fulfill services or transactions you’ve requested.
Legal obligations: To meet regulatory or statutory requirements.
Legitimate interests: For our operational needs such as security, analytics, or service improvement — provided your rights do not override these interests.

Purpose of Data Collection

We collect and use your data for the following purposes:

To provide and manage access to our website and services
To communicate with you (e.g., customer service, updates, event details)
To send marketing and promotional content (with consent)
To track and measure engagement and improve user experience
To secure our systems and detect/prevent fraud
To comply with legal or regulatory requirements

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Data that is no longer needed will be securely deleted or anonymised.

Examples:

Account data: Retained while your account is active and for up to 24 months after closure.
Transaction data: Retained for 6 years for financial audits.
Marketing data: Retained for 12 months unless you withdraw consent earlier.

Sharing Your Data

We do not sell your personal data. We may share your data only under these conditions:

a) Third-Party Service Providers

To enable our services, we work with trusted third parties (e.g., cloud storage providers, analytics platforms, marketing tools) under Data Processing Agreements (DPAs) that require GDPR-level safeguards.

Examples:

Google Analytics (anonymised usage statistics) and any other relevant platforms
Mailchimp or Brevo (email campaigns) and any other relevant platforms
AWS / Google Cloud (data storage) and any other relevant platforms

b) Legal Requirements

We may disclose personal data if required by law, subpoena, or legal process.

c) International Transfers

If your data is transferred outside the EU/EEA, it will be protected through mechanisms such as:

Standard Contractual Clauses (SCCs)
Binding Corporate Rules (BCRs)
Adequacy decisions by the EU Commission

Your Data Protection Rights (Under GDPR)

You have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten")
Restrict processing in certain cases
Object to processing based on legitimate interest or direct marketing
Data portability, allowing you to move your data to another provider
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with a supervisory authority (e.g., the ICO in the UK or NDPC in Nigeria)

To exercise any of these rights, contact us at: info@christambassadorscollege.com

Data Security

We employ advanced technical and organisational measures to protect your personal data:

SSL/TLS encryption for data in transit
Multi-factor authentication (MFA) for internal admin access
Data minimisation and access control protocols
Regular security audits and penetration testing
Anonymisation and pseudonymisation techniques where applicable
Compliance with ISO 27001 and NIST cybersecurity frameworks where feasible

Children's Data

Our services are not intended for children under 16 years old. We do not knowingly collect personal data from minors. If you believe a child has provided us with data, please contact us immediately for removal.

Automated Decision-Making and Profiling

We do not use your data for automated decision-making that produces legal or similarly significant effects. If this changes in the future (e.g., AI-based recommendations or personalisation), we will update this policy and obtain your explicit consent.

Cookies and Tracking Technologies

We use cookies to:

Remember your preferences
Analyse site usage
Deliver personalised content

You can manage cookie preferences through our Cookie Consent Banner or your browser settings.

Third-Party Links

Our website may link to third-party websites or platforms. We are not responsible for their content or data practices. We encourage you to read their privacy policies separately.

Changes to This Policy

We may update this policy from time to time to reflect changes in legal requirements or ourpractices. We’ll notify users of material changes through our website or via email, where appropriate.

Version: 1.0

Last Reviewed: March 2025.

Contact Information

For any concerns, complaints, or inquiries about this policy or your data:

Email: info@christambassadorscollege.com

Supplemental Notices (Non-EU Visitors)

If you are a visitor from outside the EU/EEA, such as the United States, Canada, Nigeria, or other regions with distinct privacy laws, please note that by using our website, you consent to the transfer of your data to our servers in compliance with GDPR and local regulations (e.g., NDPR for Nigeria, CCPA for California, etc.).