Privacy Policy.
How CyberJunior collects, uses, and protects your information.
1. Introduction
This Privacy Policy describes how CyberJunior ("we", "us", "our") collects, uses, stores, and protects personal information when you visit cyberjunior.net, purchase services, or contact our support team.
We operate under the Nigeria Data Protection Regulation (NDPR) and comply with applicable Nigerian data protection laws.
2. Information we collect
We collect information you provide directly, information collected automatically, and information from third parties:
- Account information: name, email address, phone number, business name, billing address.
- Payment information: processed by Paystack and Flutterwave. We do not store card numbers on our servers.
- Service information: domains registered, hosting accounts, email mailboxes, and related configuration.
- Technical information: IP address, browser type, device, operating system, and pages visited.
- Support information: messages sent to us via tickets, chat, or email, including attachments.
3. How we use your information
We use your information to:
- Provision and manage the services you purchase.
- Process payments and send invoices.
- Respond to support enquiries and provide technical assistance.
- Send service notifications, renewal reminders, and security alerts.
- Comply with Nigerian and international legal obligations (including NiRA and ICANN rules for domain registration).
- Prevent fraud, abuse, and unauthorized access.
4. Legal basis for processing
We process personal information on the following legal bases:
- Contract: to deliver the services you've purchased.
- Legal obligation: to comply with tax, regulatory, and registry rules.
- Legitimate interest: to secure our infrastructure, prevent abuse, and improve our services.
- Consent: for optional marketing communications. You can withdraw consent at any time.
5. Cookies and tracking
We use cookies and local storage for essential site functionality — theme preference, currency selection, and session management. We do not use third-party advertising cookies.
6. Third parties
We share information with third parties only when necessary:
- Payment processors: Paystack, Flutterwave (to process payments).
- Domain registries: NiRA, ICANN-accredited registrars (as required for domain registration).
- Infrastructure providers: datacenter operators in Lagos, Abuja, London, and New York.
- Legal authorities: when required by Nigerian law or court order.
7. Data retention
We retain account information for the duration of your account plus 7 years, as required by Nigerian tax and regulatory rules. Support tickets are retained for 3 years. Chat transcripts are retained for 90 days.
8. Your rights
Under NDPR you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion (subject to legal retention requirements).
- Object to processing based on legitimate interest.
- Withdraw consent for marketing communications.
- Lodge a complaint with the Nigeria Data Protection Commission.
To exercise these rights, email privacy@cyberjunior.net from your registered email address.
9. Security
We use industry-standard measures to protect your information: TLS in transit, AES-256 encryption at rest, access controls, audit logging, and regular security reviews. Payment information is handled entirely by PCI-DSS-compliant processors.
No system is perfectly secure. If you believe your account has been compromised, contact us immediately.
10. International transfers
Some data (such as domain registration records) is transferred to ICANN-accredited registrars outside Nigeria. We ensure such transfers comply with NDPR requirements.
11. Changes to this policy
We may update this policy to reflect changes in law or practice. Material changes will be notified by email at least 14 days before they take effect.
12. Contact
Questions about this policy? Email privacy@cyberjunior.net or write to:
CyberJunior
Lekki Phase 1, Lagos, Nigeria