Privacy Policy

STC Tutors is operated by STC Edu Consult, an education initiative of Statcomm TC Limited ("STC", "we" or "us"). We are the data controller for the personal information described in this policy.

This policy applies to the STC Tutors website and learning platform (the "Platform") and is written to meet the requirements of the Nigeria Data Protection Act 2023 and, where it applies to you, similar data-protection laws in the country where you live.

What we collect depends on how you use the Platform.

• Account details - name, email address, phone number, and a password (stored only in scrambled, hashed form).
• Parents and students - for each child or learner: name, date of birth, gender, country and language, grade or level, subjects and learning goals, school or curriculum details, and an optional profile photo. Parents also give us their own contact details.
• Tutors - profile and biography, qualifications, education and teaching history, certifications, availability, teaching setup (devices and internet), references, vetting questionnaire answers, and identity and supporting documents such as a government ID and CV. We also hold the bank or payout details tutors give us so we can pay them.
• Lessons and learning - schedules, attendance and clock-in records, assignments, assessments, feedback and reports, and lesson links.
• Payments - what was paid, when, and for what, wallet balances and transactions, subscriptions, referral earnings and payout requests. Card details are entered with, and held by, our payment provider - we do not store full card numbers.
• Messages and support - messages sent through the Platform, complaints, and anything you send us through the Contact form.
• Technical information - your IP address, device and browser type, and diagnostic logs, collected to keep the Platform secure and working.

• to create and run your account and provide the tutoring service - matching students with suitable tutors, scheduling, delivering and recording lessons;
• to vet tutors and to keep children and other users safe;
• to process payments, wallet top-ups, subscriptions, referral commission and tutor payouts;
• to send service messages such as lesson reminders, receipts, approvals and security alerts;
• to handle support requests and complaints and to review the quality of lessons;
• to understand how the Platform is used so we can fix problems and improve it, using aggregated reports wherever possible; and
• to meet our legal, accounting and regulatory obligations and to prevent fraud and misuse.

We do not sell your personal information, and we do not use it to show third-party advertising.

We process personal information because:

• it is necessary to provide the services you or your child have signed up for (contract);
• you, or a parent on behalf of a child, have given consent - for example when you accept this policy or the terms of an application - and you can withdraw it at any time;
• we have a legitimate interest in keeping the Platform and its users safe and secure, preventing fraud and improving our services, balanced against your rights; and
• we are required to by law (legal obligation), for example to keep financial records.

Children's accounts are created and controlled by a parent or guardian, and the parent's consent covers the child's information. We collect only what is needed to teach the child well and keep them safe.

Tutors and staff can see only the information about a child that they need for the lessons or tasks they are responsible for. We limit the contact details shown to tutors and staff to what they need, and lesson communication takes place through the Platform. A parent can ask to see, correct or delete their child's information at any time (see "Your rights").

We share personal information only where it is needed and only with:

• the tutors, parents and students involved in a lesson, limited to what each needs to see;
• STC staff, including Heads of Department, who are given access to specific tutors, students or reports only as their role requires;
• service providers who help us run the Platform, under agreements that limit their use of your information: Paystack (payment processing), Cloudinary (storage of images and documents you upload), Resend (delivery of email), MongoDB Atlas (database hosting), our hosting and logging providers, and the video-conferencing service used for a lesson; and
• courts, regulators, law-enforcement or other authorities where the law requires it, or where it is necessary to protect a child or another person from harm.

If we ever reorganise or transfer the business, your information may pass to the new owner, who must honour this policy.

Some of our providers store or process information outside Nigeria. Where that happens we take reasonable steps, such as contractual protections, to make sure your information receives an adequate level of protection.

We keep your information while your account is active and for as long afterwards as is needed for the purposes above. Financial records such as payments, payouts and related audit logs are kept for the period required for accounting and legal compliance.

When an account is deleted at your request we remove or scramble the personal details on it (see "Your rights"), and keep only the records we are legally or financially required to keep.

We protect personal information with measures that include hashed passwords, encrypted connections, role-based access so staff see only what they need, and monitoring for misuse. No system is perfectly secure, so please use a strong, unique password and keep it private. If a breach affects your information we will tell you and the regulator as the law requires.

Subject to the law that applies to you, you can:

• see the personal information we hold about you - you can download a copy from your account, or ask us to send it;
• ask us to correct information that is wrong or incomplete - most details can be edited directly in your profile;
• ask us to delete your account. We remove or scramble your name, email, phone number, password and photo and close the account; records we must keep for financial or legal reasons (such as payments and audit logs) are kept without those personal details being readable;
• object to, or ask us to restrict, some uses of your information, and withdraw consent you have given; and
• complain to the Nigeria Data Protection Commission (NDPC), or to the data-protection authority where you live, if you think we have not handled your information properly.

To use any of these rights, email stc.consult24@gmail.com. We may need to confirm who you are first, and will reply within the time the law allows.

We use a small number of essential cookies and browser storage to keep you signed in, remember basic preferences and keep the Platform secure. We do not use advertising or third-party tracking cookies. You can block cookies in your browser settings, but you will then not be able to sign in.

We may update this policy as our services or the law change. The date at the top shows when it was last updated, and we will let you know about significant changes.

Questions or requests about your information? Email stc.consult24@gmail.com or call +234 706 055 4954, or use the form on our Contact page.