DATA PROTECTION & GDPR

Last updated: 9/30/2026

1. GDPR COMPLIANCE

tbrockstars is committed to full compliance with applicable data protection laws across all operating regions:

  • 🇳🇬 Nigeria: Nigeria Data Protection Regulation (NDPR) 2019 and NDPR Implementation Framework
  • 🇬🇭 Ghana: Data Protection Act, 2012 (Act 843) and regulations issued by the Data Protection Commission
  • 🌍 International users: General Data Protection Regulation (GDPR) where applicable

We process personal data lawfully, fairly, and transparently in accordance with these regulations.

2. YOUR RIGHTS UNDER GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing of your data
  • Rights Related to Automated Decision-Making: Not be subject to automated decision-making without human intervention

3. LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal grounds:

  • Consent: You have given clear consent for us to process your data
  • Contract: Processing is necessary for the performance of a contract
  • Legal Obligation: We are required to process data to comply with the law
  • Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our services)

4. DATA PROCESSING INFORMATION

Data Controller

tbrockstarsNigeria Ltd and tbrockstarsGhana Ltd are the data controllers responsible for your personal data, depending on your registered region.

Data Processing Purposes

  • Providing educational services
  • Tracking student progress
  • Processing payments
  • Communicating with users
  • Improving our platform
  • Complying with legal obligations

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Student data is typically retained for the duration of the educational relationship plus a reasonable period thereafter.

5. DATA SECURITY MEASURES

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit and at rest
  • Regular security audits and assessments
  • Access controls and authentication
  • Staff training on data protection
  • Incident response procedures
  • Regular backups and disaster recovery

6. DATA BREACH PROCEDURES

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay, in accordance with GDPR requirements.

7. INTERNATIONAL DATA TRANSFERS

If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with GDPR requirements.

8. EXERCISING YOUR RIGHTS

To exercise any of your GDPR rights, please:

  • Contact us at privacy@tbrockstars.com
  • Use the privacy settings in your account
  • Submit a written request to our data protection officer

We will respond to your request within one month (or 21 days for Nigerian NDPR requests). If you are not satisfied with our response, you have the right to lodge a complaint with:

  • 🇳🇬 Nigeria: National Information Technology Development Agency (NITDA)
  • 🇬🇭 Ghana: Data Protection Commission of Ghana
  • 🌍 UK/EU: Information Commissioner's Office (ICO)

9. CONTACT INFORMATION

For data protection inquiries or to exercise your rights:

Data Protection Officer
Email: dpo@tbrockstars.com
🇳🇬 tbrockstarsNigeria Ltd, Lagos, Nigeria
🇬🇭 tbrockstarsGhana Ltd, Accra, Ghana