How the Center of Excellence uses your personal data

The ARC_ESM Center of Excellence (“the CoE”) runs this ePortal to register, enrol and certify learners and to manage training for organisations. This notice explains what we collect, why, who can see it, how long we keep it and your rights under the Nigeria Data Protection Act 2023 (and the GDPR where it applies).

What we collect

• Identity and contact: full name, email address, phone number, organisation, sector, state or location.
• Training: the courses you enrol on, intakes, start and completion dates, status, certificates issued by our partners and, for TAMI, RUAS-P and sponsored beneficiaries, a 12-month outcome check.
• Payments: invoices, amounts, payment references and the transfer receipts you upload. We do not collect card details.
• Enquiries: what you or your organisation asked us for and our diagnostic, proposal and follow-up records.
• Account and security: sign-in times, verification codes and a record of important actions (audit log).

Why, and on what legal basis

• To provide the training you enrol on (contract): registration, enrolment, payment, intake reminders and certification.
• To keep an accurate record of certification (legitimate interest): the CoE is the system of record for who trained, when and with what result, and reports completion rates to partners and funders.
• To meet funder and legal obligations (legal obligation / legitimate interest): sponsored and funder-financed programmes require outcome reporting.
• Course news and new intakes (consent): only if you ticked the box. You can switch this off at any time in your account.

Who can see it

Only CoE staff whose role needs it (for example Finance for payments, your relationship manager for your organisation's engagement). Certification partners receive what they need to enrol and certify you. Funders receive programme reports for the places they fund. We do not sell your data and we use no third-party advertising or analytics that carry personal data.

How long we keep it

Training, certification and payment records are kept permanently: the portal is the CoE's record of certification and completion statistics depend on it. Temporary items expire: verification codes and password links after use, and generated report files after 90 days. Backups are encrypted.

Your rights

• Access: download everything we hold about you from Account → Your data.
• Correction: update your contact details in your account, or ask us to correct anything else.
• Objection and erasure: because certification records must be kept, we meet these requests by restricting your profile (sign-in and non-essential emails stop and your details are hidden from all staff except the CoE Administrator). Where the law requires erasure, we pseudonymise your profile: your name, email and phone are replaced with a code and your training history is kept only as anonymous statistics.
• Withdraw consent for course news at any time.

Make a request from your account, or email info@workerbull.com. We respond within 30 days. You may also complain to the Nigeria Data Protection Commission.

Security

Data is encrypted in transit and at rest, access is role-based with two-step sign-in for staff, and every sensitive action is logged.