Who we are
Credentia is operated by the Credentia team, based in Lagos, Nigeria. We are the data controller for the purposes of this policy.
Contact: credentia.online@gmail.com
What we collect and why
2a. When you search or browse the site
Our hosting and analytics infrastructure collects standard, anonymised data about how the site is used. This includes:
- Pages visited and checklists viewed
- Search terms entered
- Time spent on pages
- Approximate location (city or state level, not your precise address)
- Browser type and device type
- Referring website (how you arrived at Credentia)
Why: This helps us understand which checklists are most needed, which searches return no results (telling us what to build next), and how to improve the experience for everyone.
Legal basis: Legitimate interests: understanding usage helps us serve you better and keep the directory accurate.
2b. When you flag an issue
If you use the “Flag an issue” feature on a checklist, we collect:
- The specific correction or concern you submit
- The checklist or entry it relates to
- Your name and email address, if you choose to provide them for follow-up
Why: To review and action corrections to checklist entries. This is the feedback loop that keeps the directory accurate.
Legal basis: Legitimate interests: processing flags is how we maintain the accuracy you rely on.
Your name and email are optional. You can submit a flag without them.
2c. When you contact us
If you send us a message through the contact page, we collect your name, email address, and the contents of your message.
Why: To respond to your enquiry.
Legal basis: Legitimate interests: responding to messages you've sent us.
2d. If you support us financially
If you make a voluntary contribution through our support page, your payment is handled by a third-party payment processor (Paystack or a similar service). We receive confirmation that a contribution was made and the amount. We do not store your card details. Those remain with the payment processor under their own privacy policy.
Why: To record the contribution for accounting purposes.
Legal basis: Contractual necessity: processing the transaction you initiated.
Your rights under the NDPR and Nigeria Data Protection Act 2023
Under Nigerian data protection law, you have the right to:
- Access: Know what personal data we hold about you
- Correction: Request that inaccurate data is corrected
- Deletion:Request that your personal data is deleted (the “right to be forgotten”)
- Objection: Object to processing based on legitimate interests
- Restriction: Ask us to limit how we use your data in certain circumstances
- Portability: Receive your data in a portable format where technically feasible
- Lodge a complaint: With the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you believe your rights have been violated
To exercise any of these rights, contact us at credentia.online@gmail.com. We will respond within 30 days.
How long we keep your data
| Type of data | How long we keep it |
|---|---|
| Analytics data | As per the analytics provider's own policy (typically up to 26 months for Google Analytics) |
| Flag submissions | Until the issue is resolved, plus a reasonable period for audit |
| Contact messages | Until the enquiry is resolved, then deleted |
| Financial contribution records | As required by Nigerian accounting and tax regulations (typically 7 years) |
Children's privacy
Credentia is a general public service and may be used by students who are under 18. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has submitted personal data to us, please contact us and we will delete it.
Changes to this policy
We will update the “last updated” date at the top of this page if this policy changes materially. We will not begin collecting new categories of personal data without updating this page first.
Contact and complaints
For privacy questions or to exercise your rights:
If you are not satisfied with how we handle a privacy concern, you may also lodge a complaint directly with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.