1. Who We Are
CBTify is an online examination and association management platform used by associations, chapter leaders, exam officers, candidates, and administrators. Depending on the interaction, CBTify may act as a data controller, joint controller, or processor on behalf of an association.
2. Data We Collect
- Account details such as name, email address, phone number, username, password hash, role, association, and chapter.
- Application and onboarding details such as association name, conference name, director name, supporting document, and desired portal slug.
- Exam data such as registration number, exam answers, scores, result history, attendance, timestamps, and session activity.
- Payment data such as payment references, transaction status, amount paid, bundle or token records, and billing history. We do not store full card details.
- Technical data such as IP address, device information, browser type, session identifiers, usage logs, and security logs.
- Communication data such as support messages, verification requests, notices, and feedback.
- Uploaded files such as association letters, IDs, question files, and other documents submitted through the platform.
- Cookie and similar technology data used for authentication, security, preferences, and optional product improvements.
3. Why We Use Your Data
- To create and manage accounts, associations, chapters, exams, and candidate sessions.
- To process payments and confirm transactions through payment providers.
- To deliver exam content, score scripts, issue results, and manage certificates where enabled.
- To verify identity, prevent fraud, monitor abuse, and keep the platform secure.
- To communicate with you about service notices, account changes, and support requests.
- To meet legal, regulatory, accounting, and audit obligations under Nigerian law.
- To improve performance, diagnose errors, and measure platform reliability.
4. Legal Basis for Processing
We process personal data where necessary to perform a contract, comply with legal obligations, protect legitimate interests, or obtain consent where the law requires it. For cookies, marketing-style tracking, and optional product features, we rely on consent or a similar lawful basis as applicable.
5. Sharing and Disclosures
We may share data with the association that invited or manages you, trusted hosting and infrastructure providers, payment processors, email or messaging providers, and legal or regulatory authorities where required. We do not sell personal data.
6. Cookies
We use essential cookies for authentication, session handling, and security. Optional cookies may be used for analytics, product optimization, or future advertising features. You can accept or reject non-essential cookies using the banner shown on the site.
7. Retention
We keep personal data only for as long as needed for the purposes described in this policy, to satisfy legal and operational requirements, and to resolve disputes or enforce agreements.
8. Security and International Transfers
We use administrative, technical, and organisational safeguards to protect personal data. Where service providers or infrastructure are located outside Nigeria, we will take reasonable steps to ensure appropriate safeguards are in place.
9. Your Rights
Subject to applicable law, you may request access to your data, request correction, object to certain processing, ask for deletion where appropriate, restrict processing, ask for portability, withdraw consent, or complain to the relevant supervisory authority.
10. Children and Minors
The platform is intended for organisational and examination use. If a minor is processed through a lawful exam or membership workflow, the relevant association or guardian should ensure the disclosure is permitted and appropriate.
11. Contact Us
For privacy questions or requests, contact us at admin@racbt.org.