Privacy notice. Version 2026-11-03, dated 3 November 2026.
Privacy notice
Tax Doctor Consulting Limited, which runs TaxDoctor Academy, is responsible for the personal data described here.
What we hold
We hold your name, email address and phone number, and the details of your enrolment. We keep a record of your payments and invoices, your progress, your quiz answers and task submissions with the marks and comments on them, your attendance at live sessions, and your certificates. We also keep records of your sign-ins, sessions and registered devices, and a log of the files you download.
Card and USSD payments and dedicated transfer accounts are handled by Paystack. We never see or keep your card details, and we do not store bank account numbers.
Why we hold it
We use it to run your course, take your payment, mark your work, issue and verify your certificate, keep your account secure and protect the Academy's material from being copied or shared.
We rely on three legal grounds. Running your course, taking your payment, marking your work and issuing your certificate are needed for our contract with you. Keeping payment and invoice records is required by law. Keeping your account secure, checking that sign-ins come from a person, and protecting the Academy's material are our legitimate interests, and we keep what we use for them to the minimum needed.
Who can see your phone number
Full phone numbers are seen only by the coordinator, the course lead and the owner. Everyone else sees a masked form. A masked form of your number is also printed in the moving mark on videos.
Videos and files carry your name
Every video you watch and every file you download carries your name, so that a copy that is shared can be traced. Files also carry your email, the date and a reference. This is part of the licence you accept when you enrol.
Who else handles your data
We use service providers to run the platform. They act on our instructions.
Supabase holds our database and file storage, and Vercel hosts the site. Both run in London, in the United Kingdom. VdoCipher, in India, delivers the videos and receives your name and the masked form of your number to print the moving mark. Resend, in the United States, sends our emails and receives your name and email address. Cloudflare, in the United States, runs the check that a sign-in or sign-up comes from a person, and receives your internet address and browser details. Paystack, in Nigeria, handles payments.
This means your personal data is sent outside Nigeria. We send it only as far as we need to deliver the course you signed up for, and our providers are bound to protect it.
Cookies
We use only the cookies the site needs to work, and none for advertising.
tdu_device recognises your browser as one of your registered devices. It lasts 400 days. tdu_sid holds your open session and ends when you close your browser. The sb- cookies keep you signed in. tdu_ds remembers your data saver setting for one year.
Integrity records
If the Academy acts on a suspected breach of the licence, it keeps a record of what was found, the notices sent to you, your reply and the decision. Integrity records are kept for legal claims and are not erased on request.
How long we keep things
Payment, invoice and certificate records are kept as the law requires. Your progress, quiz answers, task submissions, marks and other assessment records, and your sign-in and device records, are kept while you are a learner and for six years after your course ends. They are the evidence behind your certificate and any question about it. After that we delete them.
Your rights
You can download your data from your account page at any time. You can ask us to correct it, and you can ask us to delete it. We delete what we are free to delete. We keep payment and certificate records as the law requires, we keep assessment records for six years because they stand behind your certificate, and we keep integrity records for legal claims, as set out above. If you are not satisfied with how we have handled your data, you may complain to the Nigeria Data Protection Commission.
Contact
Our Data Protection Officer is Kayode Okunola. Write to the Academy at kayode@taxdoctor.com.ng for any privacy question.