Samchis Web Dev School

Privacy Policy

Effective date: July 4, 2026

This Privacy Policy explains how Samchis Web Development School (the “Platform”), operated by Samchis Enterprises (“Company”, “we”, “us”, “our”), collects, processes, stores, retains, protects, and limits the use of personal, technical, and operational data.

The Platform is a structured educational and digital systems environment. Data collection and processing are necessary to preserve learning integrity, security, identity accountability, subscription enforcement, and system trust.

1. Governing Documents & Context

This Privacy Policy operates alongside:

  • The Terms of Service
  • The User Manual (U00)
  • Subscription, billing, and access rules displayed on the Platform

The User Manual explains how platform systems behave from a user perspective. It does not override this Privacy Policy or limit lawful data processing required for platform operation, security, audits, or compliance.

2. Categories of Data Collected

The Platform collects only data necessary to operate structured learning, access control, security, and community systems.

  • Account & Identity Data: email address, username, authentication credentials (hashed), account state, verification status.
  • Profile & Learning Data: names, demographic context, learning activity, assignment attempts, submissions, reviews, progress records, certificates, and outcomes.
  • Dev Space & Project Data: project metadata, file contents, snapshots, submission records, review notes, and visibility states.
  • Subscription & Transactional Data: plan level, payment status, invoices, expiry dates, and billing events (excluding full payment card details).
  • Technical & Security Data: IP addresses, device and browser characteristics, session identifiers, timestamps, access logs, verification events, abuse indicators, and audit trails.
  • Support & Communication Data: helpdesk messages, reports, attachments (subject to scanning), and escalation history.

3. Purpose of Data Processing

Data is processed strictly for legitimate platform purposes, including:

  • Authentication, authorization, and identity accountability
  • Learning progression, assignments, reviews, and certification
  • Dev Space operation, submissions, and review workflows
  • Subscription enforcement and billing integrity
  • Fraud prevention, abuse detection, and security investigations
  • Auditability, dispute resolution, and governance integrity
  • Legal, regulatory, and contractual compliance

4. Logging, Audits & Non-Erasure Guarantees

Certain data is recorded and retained to protect platform integrity.

This includes:

  • Security logs and authentication events
  • Verification actions and outcomes
  • Submission, review, and enforcement records
  • Administrative and moderation actions

Such records cannot be altered or deleted on request where retention is necessary for security, audits, abuse prevention, dispute resolution, or legal compliance.

5. Data Sharing & Disclosure

We do not sell, rent, or commercially exploit personal data.

Data may be disclosed only:

  • When required by law, court order, or lawful authority
  • To protect the rights, safety, or security of users or the Platform
  • To trusted infrastructure or service providers strictly for operational purposes, under confidentiality obligations

6. Data Retention Policy

Data is retained for as long as reasonably necessary to:

  • Operate learning and community systems
  • Preserve auditability and trust
  • Enforce platform rules
  • Comply with legal obligations

Account deletion does not automatically erase historical records, learning outcomes, certificates, or security logs where retention is justified.

7. User Rights & Lawful Limitations

Users may request access to or correction of personal data, subject to identity verification.

Requests may be limited, delayed, or refused where compliance would:

  • Compromise platform security or abuse prevention
  • Invalidate audit trails or learning records
  • Violate contractual or legal obligations
  • Expose proprietary systems or intellectual property

8. International Data Context

Samchis Enterprises operates primarily under Nigerian data protection regulations (NDPR).

Where applicable, the Platform aligns with internationally recognised privacy principles, including GDPR standards, without compromising platform security, integrity, or auditability.

9. Security Measures & Risk Disclaimer

We employ administrative, technical, and organisational safeguards, including access controls, encryption, segregation of duties, and audit logging.

However, no digital system can be guaranteed to be completely secure. Use of the Platform is at your own risk.

10. Changes to This Policy

This Privacy Policy may be updated periodically.

Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.