Privacy Policy

1. Introduction

Mirror Age Concepts ("we", "us", "our", the "Company") operates Grafix@Mirror LMS (the "Platform"), a learning management system that delivers professional technology training including Data Science, Artificial Intelligence, Web Development, Cybersecurity, and Cloud Computing.

This Privacy Policy explains what personal information we collect when you use the Platform, how we use it, and the choices you have. By registering and using the Platform, you consent to the practices described in this Policy, together with our Terms & Conditions, User Agreement, License, and Cookie Policy.

2. Information We Collect

We collect information that you provide directly, information collected automatically, and information provided by third parties.

• Identity and Contact Information: full name, date of birth, gender, phone number, email address, and residential address.
• Location Information: nationality, country of residence, state/province, and LGA/county of residence.
• Enrollment and Payment Information: selected course, course fee, payment option (full or installment), and payment records.
• Verification (KYC) Documents: government-issued ID type and number, passport photograph, and signature image.
• Facial Biometrics: an encrypted face descriptor and facial image used for secure, password-less login and account protection. This is optional and only collected with your consent.
• Account and Usage Data: login records, IP address, device and browser information, pages visited, course progress, assignment and exam results, and support enquiries.
• Affiliate Referral Data: when you register through an affiliate partner, the referral token and associated course details are recorded.

3. How We Use Your Information

• To create and manage your student account, enroll you in courses, and deliver learning materials.
• To process payments and manage installment plans.
• To verify your identity and protect your account, including facial biometric authentication.
• To issue badges, certificates, and verify credential authenticity.
• To communicate with you about your enrollment, course updates, and important notices.
• To improve the Platform, ensure security, and comply with legal obligations.

4. Legal Basis for Processing

We process your personal information based on your consent (such as providing registration details and optional biometric data), the performance of a contract (delivering the courses and services you enrolled for), legitimate business interests, and compliance with legal obligations applicable in Nigeria.

5. How We Share Your Information

• Instructors and Staff: assigned instructors receive the information needed to deliver your course and assess your progress.
• Payment Processors: payment details are shared with third-party processors such as Paystack to complete transactions. We do not store full card numbers.
• Affiliate Partners: when you register through an affiliate referral, limited enrollment information is shared with the partner for reporting and commission purposes.
• Service Providers: hosting, email delivery, and analytics providers who process data on our behalf under confidentiality obligations.
• Legal Compliance: where required by law, regulation, or valid legal process.

We do not sell your personal information to third parties.

6. Data Security

We use technical and organisational measures to protect your data, including encryption in transit, secure session management, hashed passwords, and restricted access to personal data. While we strive to protect your information, no method of transmission or storage is completely secure.

7. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and audit requirements, or as required for the enforcement of our agreements. KYC documents and biometric data are retained only for as long as necessary for identity verification and account security.

8. Facial Biometric Data

Face enrollment is optional. When you enroll, we generate a numerical face descriptor from your captured image. This data is used solely for password-less authentication and account protection. You may skip face setup during registration and enroll later, and you may disable it at any time from your profile settings.

9. Children's Privacy

The Platform is used to deliver training to minors through our Affiliate (Unitary Academy) program. Where a student is under 18, a parent, guardian, or authorised affiliate partner provides consent and supervises the registration on their behalf.

10. Cookies

We use essential cookies and browser storage to operate the Platform securely. For full details, please review our Cookie Policy.

11. Your Rights

Depending on applicable law, you may have the right to access, correct, or delete your personal information, restrict or object to processing, and request data portability. You may update your profile information in your dashboard or contact us to exercise these rights.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the Platform. Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

For questions about this Privacy Policy or your personal data, contact Mirror Age Concepts (RC 3639510) at info@mirrorageconcepts.com.