Governance & Trust

Privacy Policy

Draft for counsel review. This policy describes the intended handling of information collected through the CUN digital platform. It must be reviewed and approved by the university before production use.

Information we may collect

Admissions information, identity and contact details, academic records, uploaded documents, payment references, support requests, security logs and technical information necessary to operate the service.

Purposes

Admissions processing, student administration, communications, payments, document verification, security, service improvement and compliance with legal obligations.

Lawful basis & Nigerian privacy law

The production policy should document the applicable lawful bases and the university's obligations under Nigeria's data-protection framework, including the Nigeria Data Protection Act 2023, as applicable.

Retention

Retention periods should be defined by record category and regulatory requirements. Documents should not be kept indefinitely without a documented purpose.

Your rights

The final policy should explain applicable rights, request channels, identity verification, response timelines and complaint escalation.

Processors & transfers

The final policy should identify relevant hosting, authentication, payment, email, analytics and storage processors and address cross-border transfers where applicable.

Security

Production controls should include least-privilege access, MFA for privileged users, encryption in transit, private document storage, signed URLs, audit logging, backups and incident response.

Contact

The official privacy contact should be inserted by CUN before launch.