This Privacy Policy explains how the Nigerian Army Resource Center Academy! collects, uses, discloses, stores, and protects personal data submitted through its digital learning platform and related services. This Policy is prepared in accordance with the Nigerian Data Protection Act, 2023 (NDPA) and other applicable data protection laws.
We respect your right to privacy. This Policy describes our commitment to transparent, accountable, and lawful processing of personal data collected through our learning platform, training portals, and other digital services.
Data Controller: Nigerian Army Resource Center Academy!
Address: Army Resource Centre, Nigerian Army Headquarters, Asokoro, Abuja, Nigeria
Contact Email: narc.admin@narc.org.ng
Contact Phone(s): 09054244469 | 07057473811 | 08181764112
Personal Data: Any information that identifies or can reasonably be used to identify a living individual.
Processing: Any operation performed on personal data, whether or not by automated means (e.g., collection, recording, storage, retrieval, use, disclosure, erasure).
Data Subject: The individual to whom personal data relates.
Data Controller: The entity that determines the purposes and means of processing — in this case, the Academy.
Cookies: Small text files stored on a user’s device to support site functionality, analytics, and preferences.
Depending on how you interact with the platform, we may collect:
Identification Data: Full name, rank (where applicable), date of birth, service/identification number, contact address, telephone number, and email address.
Usage Data: Device type, IP address, browser type, login timestamps, pages accessed, and session duration.
Training & Academic Data: Course enrolments, attendance records, assessments, scores, completion status, feedback, certificates issued.
Communication Data: Messages, enquiries, support tickets, and correspondence.
Payment Data: Billing and invoicing information where applicable (excluding full card numbers; handled by PCI-DSS compliant payment processors).
Verification Data: Identity verification or background-check information received from authorised third parties where required.
Directly from You: Registration forms, profile updates, course enrolment, surveys, and support interactions.
Automatically: Through cookies, logs, and other tracking technologies when you access our platform.
From Third Parties: Service providers (e.g., payment processors, verification services), authorised partners, or as permitted/required by law.
We process personal data to:
Manage user registration, authentication, and access to courses and learning resources.
Administer course delivery, assessments, and certification.
Provide helpdesk and technical support, and respond to enquiries.
Send administrative and program-related communications.
Monitor and improve platform performance, personalise learning pathways, and analyse training outcomes.
Meet statutory, regulatory, and contractual obligations.
Detect, prevent, and respond to fraud, unauthorised access, and security incidents.
Processing is based on one or more of the following legal grounds:
Consent: Where you have freely given consent for specific processing activities.
Contractual Necessity: Where processing is necessary to perform services you requested (e.g., course delivery).
Legal Obligation: Where processing is required to comply with statutory or regulatory duties.
Legitimate Interests: Where processing is necessary for the operational, security, and administrative interests of the Academy, provided these do not override your fundamental rights.
We may share personal data with:
Authorized Service Providers: Hosting providers, learning management system vendors, analytics providers, and payment processors who assist in platform operation under contractual confidentiality and security obligations.
Regulatory or Legal Authorities: Where required by law, court order, or to protect our legal rights.
Internal Units: Relevant organisational units where sharing is necessary for training, compliance, auditing, or operational purposes.
We do not sell or rent personal data to third parties.
If personal data is processed or stored outside Nigeria, we will implement appropriate safeguards (for example, contractual safeguards and encryption) to ensure an adequate level of protection consistent with NDPA requirements.
All payment transactions are processed by PCI-DSS compliant third-party providers. We do not retain full payment card details on our systems.
We adopt industry-standard technical and organisational measures to protect personal data, including:
Encryption of data in transit and at rest where appropriate.
Role-based and multi-layer access controls.
Regular security assessments, audits, and penetration testing.
Incident response procedures to investigate and remediate any data breaches.
We retain personal data only as long as necessary to:
Provide and improve training services;
Meet legal, regulatory, or contractual obligations;
Resolve disputes or enforce our agreements.
Specific retention timelines are documented internally and can be provided on request.
As a data subject, you have the right to:
Request access to personal data we hold about you.
Request correction or update of inaccurate or incomplete data.
Request deletion (the “right to be forgotten”) in circumstances permitted by law.
Restrict or object to certain processing activities.
Withdraw consent where processing is based on consent.
Request portability of your personal data in a structured, commonly used, machine-readable format.
Lodge a complaint with the relevant supervisory authority, including the Nigeria Data Protection Commission.
(Where rights are limited by law — for example, for national security, defence, or other statutory exemptions — we will explain the applicable limitation and the legal basis.)
We use cookies to:
Maintain session state and secure user login;
Collect analytics to monitor platform usage and learning metrics;
Improve website performance and personalise content.
You can manage cookie preferences through your browser settings or via the cookie controls on our platform.
Our platform may contain links to external sites and resources. We are not responsible for the privacy practices or content of external sites. Review their privacy policies before providing personal data.
We may update this Policy to reflect changes in law, technology, or operations. Revised versions will be posted on our platform with an updated effective date. Where changes materially affect how we process your data, we will provide notice and, where required by law, seek fresh consent.
For questions, data subject requests, or to report a privacy concern, contact:
Data Protection Officer
Nigerian Army Resource Center Academy!
📍 Army Resource Centre, Nigerian Army Headquarters, Asokoro, Abuja, Nigeria
Email: narc.admin@narc.org.ng
Phone(s): 09054244469 | 07057473811 | 08181764112