Privacy Policy

1. Who We Are

Rewardology Academy is an online learning platform for Total Rewards, Compensation and Benefits professionals. The platform is operated from Nigeria and serves a global learner base. For any privacy-related enquiries, contact us at hello@rewardologyacademy.com.

2. What Data We Collect

We collect data in two ways: data you provide directly, and data collected automatically when you use the platform.

Data you provide

• Account information — if you create a free account, we collect your email address and any profile details you choose to provide (such as your name).
• Contact information — if you email us or join the waitlist for a course, we collect your email address and any information you include in your message.
• Name for certificates — if you choose to generate a completion certificate, you provide your name. For signed-in users, certificate-related progress may be stored in your account.
• Feedback and correspondence — any messages, survey responses, or feedback you submit to us.

Data collected automatically

• Usage data — pages visited, content interacted with, time spent on the platform, and navigation paths, collected via analytics tools.
• Device and browser data — browser type, operating system, screen resolution, and IP address (used for geographical analytics only, not individual identification).
• Cookies and local storage — we use browser local storage and, where applicable, session cookies to save learning progress. See Section 6 for details.
• Learning progress (signed-in users) — when you are signed in, XP earned, lessons completed, quiz results, and dictionary activity are stored in our secure database (Supabase) and linked to your account.

Where paid content or services are offered, any payment transactions are handled by third-party payment processors. We do not directly collect or store payment card data on our servers.

3. How We Use Your Data

We use the data we collect for the following purposes:

• To operate and improve the platform — understanding how content is used helps us prioritise what to build next.
• To provide account features, including syncing your learning progress across devices.
• To respond to your enquiries and communicate with you when you contact us.
• To send platform updates or new content notifications, only where you have given us your email address and consented to receive such communications.
• To comply with our legal obligations under applicable Nigerian and international data protection law.
• To detect and prevent security threats, fraud, and abuse.

We do not sell your personal data to any third party. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or the Nigeria Data Protection Act (NDPA) applies, we process your personal data on the following legal grounds:

• Legitimate interests — for analytics and platform improvement, where this does not override your rights and freedoms.
• Consent — for marketing communications, which you can withdraw at any time.
• Contract — where processing is necessary to provide a service you have requested (including maintaining your account and learning progress).
• Legal obligation — where we are required to process data to comply with applicable law.

5. Third-Party Services

We use a small number of third-party services to operate the platform. Each has its own privacy policy and processes data in accordance with applicable law.

• Netlify — our website hosting provider. Netlify may collect server logs including IP addresses as part of standard hosting operations. See Netlify's Privacy Policy.
• Supabase — our authentication and database provider. When you create an account, Supabase stores your account credentials and learning progress data on our behalf. See Supabase's Privacy Policy.
• Google Fonts — we use Google Fonts for typography. Google may collect limited data when fonts are loaded. See Google's Privacy Policy.
• Analytics — we may use a privacy-respecting analytics tool to understand aggregate platform usage. We do not share individual user data with analytics providers in a form that identifies you personally.

We currently do not use Facebook Pixel, Google Ads tracking, or any advertising-focused tracking technology on this platform. If we introduce such technology in the future, we will update this Privacy Policy accordingly and, where required by applicable law, seek your consent before doing so.

6. Cookies and Browser Storage

Rewardology Academy uses browser local storage to save learning progress for visitors who are not signed in — including XP earned, lessons completed, quiz results, and dictionary terms read. This data lives in your browser on your device and is not linked to an account unless you sign in.

When you create a free account and sign in, your learning progress (XP, completed lessons, quiz results, dictionary activity, and related profile data) is stored in our secure Supabase database and associated with your account. This allows your progress to sync across devices when you are signed in.

You can clear locally stored data at any time by clearing your browser's local storage or browsing data. To delete account-linked progress, contact us or delete your account where that option is available.

We may use minimal functional cookies for platform operation (such as session management and authentication). We currently do not use advertising or tracking cookies.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Account and learning progress data — retained while your account is active, and for up to 90 days after account deletion unless a longer period is required by law.
• Email enquiries and correspondence — retained for up to 3 years from the date of last contact, then deleted.
• Analytics data — retained in aggregated, anonymised form indefinitely; individual-level data retained for up to 26 months.
• Learning progress stored only in your browser — retained until you clear your browser data. We have no control over this data unless you are signed in.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — the right to receive a copy of the personal data we hold about you.
• Correction — the right to ask us to correct inaccurate data.
• Erasure — the right to ask us to delete your personal data, subject to certain legal exceptions.
• Restriction — the right to ask us to restrict processing of your data in certain circumstances.
• Portability — the right to receive your data in a structured, machine-readable format.
• Objection — the right to object to processing based on legitimate interests.
• Withdrawal of consent — where we process data on the basis of consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at hello@rewardologyacademy.com. We will respond within 30 days. If you are an EU or UK resident and believe your rights have not been adequately addressed, you have the right to lodge a complaint with your local supervisory authority. If you are a Nigerian resident, you may contact the Nigeria Data Protection Commission (NDPC).

9. International Data Transfers

Rewardology Academy serves a global audience. Your data may be processed in countries outside your own, including Nigeria and countries where our third-party service providers operate. We take reasonable steps to ensure that any such transfers comply with applicable data protection law and that your data receives an adequate level of protection.

10. Children's Privacy

Rewardology Academy is a professional learning platform designed for adults working in or entering the HR profession. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. However, no internet transmission is completely secure, and we cannot guarantee the absolute security of data transmitted to or from the platform.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will take reasonable steps to notify you — for example, by posting a notice on the platform. Your continued use of Rewardology Academy after changes take effect constitutes your acceptance of the revised policy.

13. Contact Us

For any privacy-related questions, requests, or concerns, please contact us at:

Rewardology Academy
Email: hello@rewardologyacademy.com
Website: rewardologyacademy.com