Privacy Policy

Springtower Computer Institute (“Springtower”, “we”, “us”) values your privacy. This Privacy Policy explains what personal data we collect, why, and what your rights are. It is aligned with the Nigerian Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023.

1. Who we are

Springtower Computer Institute is the data controller responsible for personal data collected on springtowercomputers.com. Our registered address is 134b Okigwe Road, by IMSU Junction, Owerri, Imo State, Nigeria.

2. Data we collect

Account data — your name, email, phone number, username, hashed password, and (optionally) profile picture.

Order and payment data — items you buy, amounts, Paystack reference numbers, scratch card PINs you redeem, billing email. We never see or store your card number, CVV, or bank PIN.

Registration documents — when you use our online registration service, documents (e.g. NIN slip, photos, school IDs) that you choose to upload.

CBT activity — questions attempted, scores, time spent, subjects practised.

Technical data — IP address, device type, browser, pages visited (collected via cookies and server logs).

Communications — emails, support messages and chat history with us.

3. How we use it

To create and operate your account.
To deliver scratch card PINs and registration confirmations.
To score and personalise your CBT practice.
To send transactional emails (order receipts, status updates, password resets).
To respond to support requests.
To prevent fraud, abuse and account compromise.
To improve the Services through aggregated, non-identifying analytics.
With your consent, to send occasional newsletter/marketing emails. You can unsubscribe with one click.

4. Lawful basis (NDPR)

We rely on the following lawful bases under the NDPR / NDPA 2023:

Contract — to provide the Services you have asked for.
Legitimate interest — to keep our platform secure and to improve it.
Consent — for newsletter signups and non-essential cookies. You can withdraw this at any time.
Legal obligation — when we must retain records for tax or law-enforcement requests.

We do not sell your personal data. We share limited data only with:

Paystack — to process card / bank / USSD payments.
The relevant exam body or agency (WAEC, JAMB, CAC, NIMC etc.) when you use our registration service.
Termii — to send SMS notifications (PIN delivery, booking confirmations) where you provide a phone number.
Our email provider — to deliver transactional and newsletter emails.
Anthropic — if you use our optional AI chat assistant, your message text is sent to Anthropic to generate a reply. We do not send personal identifiers with the message.
Hosting and security partners — under confidentiality obligations.
Law enforcement — where required by valid Nigerian legal process.

6. How long we keep it

Account data — for as long as your account is active, plus 12 months after closure.
Order and payment records — 7 years (tax requirement).
Registration documents — until 90 days after the registration is completed, then permanently deleted.
CBT practice history — until you delete it from your dashboard or close your account.
Server logs — 30 days.

7. Security

We use HTTPS everywhere, password hashing (bcrypt), CSRF protection, login throttling, audit logging and encrypted database backups. We restrict staff access to personal data on a need-to-know basis. While no system is 100% secure, we work hard to keep your data safe.

8. Your rights

Under the NDPR / NDPA 2023 you have the right to:

Access — request a copy of your personal data.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your data (subject to legal retention requirements).
Restriction — ask us to stop certain processing.
Portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interest.
Withdraw consent — at any time, e.g. unsubscribe from newsletters.

To exercise these rights, email info@springtowercomputers.com. We will respond within 30 days.

9. Children

Springtower is intended for users aged 13 and above. For users under 18, a parent or guardian should review this policy and supervise account use. We do not knowingly collect data from children under 13.

10. International transfers

Some of our processors (Paystack, Anthropic, the email provider) operate or store data outside Nigeria. Where this happens, we ensure adequate safeguards in line with NDPR requirements, including contractual protections.

11. Cookies

We use cookies and similar technologies for essential site functions, anonymous analytics and remembering your preferences. See our Cookie Policy for details.

12. Contact & complaints

For any privacy concern, contact our Data Protection Officer:

Email: info@springtowercomputers.com
Phone: +234 812 776 6120
Address: 134b Okigwe Road, by IMSU Junction, Owerri, Imo State, Nigeria

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).