Privacy policy

This policy explains what personal information Corperland collects, why we collect it, who we share it with, and what rights you have over it. It covers this website, the Corperland app at app.corperland.ng, and the Corperland phone app.

Who we are

Corperland Ltd (RC 7723671) is the data controller for the information described here. We help prospective and serving corps members with NERD clearance, PPA openings, courses and NYSC information. For NERD clearance we work with a number of accredited NERD Digital Service Centres, and we submit your registration through one of them.

Contact us about anything in this policy at [email protected].

What we collect

• Your account. Your email address, your name, and your phone number if you add it. Whether you are a prospective, serving or former corps member, and your batch and stream if you tell us. If you sign in with Google or Apple, we receive your name and email address from that account.
• Your NERD applications. Who you are: your name, sex, date of birth, marital status and National Identification Number. How to reach you: your address, email and phone number, where you are from and where you studied, and the same for your next of kin. Your academic details: institution, faculty, department, programme, matriculation number and course, and contact details for your supervisor and Head of Department.
• Documents you upload. For NERD: your passport photograph, a picture of your NIN slip, your academic records, and your project work.
• Payments and purchases. The amount, date, reference and status of every payment, and what it was for: a NERD registration, a course or a download. Card and bank details are entered directly with the payment provider and never reach our servers.
• What you do in the app. The articles you save and read, the PPA openings you save or tell us you applied to, the courses and downloads you buy, and your notification settings. While you are signed in, the app also records which screens you open and what you tap, such as an article you read to the end or the NERD screen, tied to your account, so we can see what helps and improve the app. It never records what you type. We store these records ourselves, keep them for 90 days. After that we keep only a summary for each day of what you did, still tied to your account, until you delete your account.
• Device and technical data. Your sign-in times, IP address, browser and device type, and the pages you visit. On a phone, if you allow notifications, the token that lets us send them to that device.

The exact details we ask for on a NERD application are the ones on the form, and they change when NERD changes what it requires.

Why we collect it, and on what basis

• To run your account and sign you in. This is necessary to provide the service you asked for.
• To complete and submit your NERD registration. Necessary to perform our contract with you.
• To take payment, give you what you bought, and keep financial records. Contract, and our legal obligations under tax and financial law.
• To email and notify you about your account, your applications and your purchases. Contract.
• To answer your questions and handle disputes. Contract, and our legitimate interest in running the service.
• To keep the service secure and prevent fraud. Our legitimate interest in protecting the service.
• To understand how the website and app are used, in aggregate. Our legitimate interest in improving them.
• To tell you about Corperland's own services by email. Our legitimate interest, and you can unsubscribe from any of these emails.

Almost everything on a NERD application is required by NERD, not by us. If you do not provide it, we cannot complete your registration.

Your NIN

We collect your NIN and a picture of your NIN slip because NERD requires them to identify you in the national repository. We use them for no other purpose. We do not use your NIN to look you up in any other database, we do not share it with anyone other than the parties named below, and we do not use it for marketing, credit checks or verification of any other kind.

Your project work

Your project is your intellectual property and it stays that way. We transmit it to NERD as part of your registration. We do not publish it, sell it, use it to train any system, or make it available to anyone outside the parties named below.

Registering for someone else

You can register on another person's behalf, and one account can hold several NERD applications. If you do, you must have that person's permission to give us their details and documents, including their NIN, and to receive their clearance slip for them. Whoever holds the account can see every application in it, and the documents uploaded to each.

The person being registered is the one whose data we hold. They have the same rights over their information as anyone else, and they can contact us directly to exercise them, whether or not they hold the account.

Details you give us about other people

Every NERD application also carries contact details for a next of kin, a supervisor and a Head of Department. NERD requires them as part of the submission, and that is the only reason we ask. We pass them on with the rest of the application.

We do not contact these people ourselves. They have the same rights over their information as you have over yours, and they can contact us at the address above.

PPA openings

When you apply for a PPA opening, you apply with the employer, outside Corperland. We do not send your details to them. We only keep a note of the openings you save and the ones you tell us you applied to, so you can find them again.

Who we share it with

• NERD, and the accredited centre handling your application. Everything in your NERD application is submitted to them. We assign your application to one of the accredited NERD Digital Service Centres we work with. We do not publish the list, but if you want to know which centre handled your registration, email us and we will tell you. Once your application is in the national repository it is held under NERD's own rules, not ours.
• The payment provider handling your payment. We use Paystack and Flutterwave. They hold the card or bank details we never see.
• Our service providers. They act on our instructions and cannot use your data for their own purposes: cloud hosting and file storage, email delivery, push notifications through Google Firebase, and our website analytics.
• Anyone we are legally required to share it with. A court, a regulator, or a law-enforcement agency acting under proper authority.

We do not sell your personal data.

Where your data goes

Your data is stored and processed in Nigeria and, for some of the services above, outside Nigeria, including in the European Union and the United States. Our hosting, file storage and email delivery may be located outside Nigeria.

Where data leaves Nigeria we rely on the transfer conditions in the Nigeria Data Protection Act 2023, and we require our providers by contract to protect it to the same standard we do.

Emails and notifications

We email you the codes you sign in with, and updates about your NERD applications, your purchases and your account. From time to time we also email you about Corperland's own services. Every one of those emails has a link to unsubscribe, and we count whether our emails are opened and their links clicked, so we can tell which ones are useful.

On a phone, we send push notifications only if you allow them. You can turn them off in the app or in your phone's settings.

How long we keep it

We keep your information for as long as your account is open and we need it to provide the service, to answer questions about a completed NERD registration, and to meet our legal obligations.

You can delete your account from the app. Deletion happens 24 hours after you ask, and signing in again before then cancels it. We cannot delete an account while one of its NERD applications is still being processed, or while it holds money that has not yet been settled.

Payment and refund records are kept for at least six years, because Nigerian tax and financial-record law requires it.

Once your registration is in NERD's repository we cannot remove it from there. Deleting your data with us does not delete it from the national repository. That is NERD's record, held under their rules.

How we protect it

Your data travels over encrypted connections, and your documents are stored in access-controlled storage reached through time-limited links rather than public addresses. Access is limited to the staff and registration officers who need it, and changes to an application's status and payments are logged with the person who made them. We sign you in with a one-time code sent to your email, or with Google or Apple, so there is no password to steal.

No system is perfectly secure. If a breach affects your data and puts you at risk, we will notify you and the Nigeria Data Protection Commission as the law requires.

Cookies and analytics

We use cookies that are strictly necessary to keep you signed in and to keep the service secure. These cannot be turned off without breaking the service.

When you visit any page on this website, we set a cookie of our own that holds a random identifier for your browser. It lasts two years and is never shared with anyone else. It tells one visitor apart from another, so we can count visits without counting the same person twice. If you sign up or sign in, we link that identifier to your account.

We also record which pages are visited, the website that sent you, the campaign in the link you followed, whether you are on a phone, tablet or computer, and what you tap and read, so we can see what helps and fix what is confusing. We store these records ourselves, keep them for 90 days and then keep only daily totals. We never record what you type, and we do not follow you to other sites.

For now we also send the same measurements to Umami, the analytics tool we used before, while we check our own counts against it. Umami does not use cookies, and we will stop using it once the check is done.

You can block or delete cookies in your browser's settings. If you block the ones that keep you signed in, you will not be able to sign in.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything inaccurate or incomplete
• delete your data, where we are not required to keep it
• restrict or object to how we use it
• transfer it to you or another provider in a portable format
• withdraw consent, where we relied on consent

Email [email protected] and we will respond within 30 days. We may ask you to confirm your identity first. We will not hand your data to someone claiming to be you.

Some rights have limits. We cannot delete records we are legally required to keep, we cannot recall an application already submitted to NERD, and we cannot delete an application while money is owed or under dispute.

If you are not satisfied with how we handle your request, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Children

Corperland is for graduates and corps members. It is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy. We will tell you about significant changes by email, and the date at the top of this page always shows when it last changed.

Contact

Corperland Ltd, RC 7723671. Email [email protected].