This policy explains what Databeauty Tribe collects about you, why we collect it, who else sees it, and what you can ask us to do about it.
It describes the site as it actually works today. Where a decision has not been made yet, the text says so plainly rather than promising something we have not settled.
This draft has not been reviewed by a lawyer. TODO: remove this line once a qualified Nigerian data protection lawyer has reviewed and approved the policy.
Who we are
Databeauty Tribe is a data analytics community and training provider based in Abuja, Nigeria. We are the data controller for the information described here, which means we decide why and how it is used.
Contact us about anything in this policy at databeautytribe@gmail.com.
TODO: registered company name and RC number, if the business is incorporated. The site footer currently shows "RC: coming soon".
TODO: a named data protection contact and a postal address in Abuja. The NDPA expects a reachable contact, and a Gmail address alone may not satisfy that.
What we collect, and why
When you subscribe to the newsletter
We collect your email address. We use it to send community updates. Our lawful basis is your consent, given when you submit the form.
When you join the community or create an account
We collect your name, email address, phone number and a password. Passwords are stored only as a bcrypt hash, so nobody at Databeauty Tribe can read yours, including us.
When you register for training
We collect your name, email, phone, experience level and the programme you chose. We use it to place you in a cohort, contact you about the course, and track payment.
When you join the mentorship waitlist
We collect your name, email, career stage and the focus area you want mentoring in, so we can match you when places open.
When you enter a Business Challenge
We collect your pod name, project title, the links you submit, and any note you write for the judges. Judges read these to score entries. We also record the score and judges' notes about your submission.
Your submitted work stays yours. TODO: decide and state whether Databeauty Tribe may showcase winning or shortlisted entries publicly, for how long, and whether you will ask permission each time or treat entry as permission.
When you contact us
We collect your name, email, enquiry type and your message.
When you simply browse
Google Analytics records how you move through the site and sets a cookie
called _ga that lasts two years. Our hosting provider records standard
server logs, which include your IP address.
Cookies and similar technology
| What | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_TCJR2TR01J |
Google Analytics | Counts visitors and pages | 2 years |
| Session cookie | Databeauty Tribe | Keeps you signed in | 30 days |
dbt-theme |
Databeauty Tribe | Remembers light or dark mode | Until cleared |
dbt-cookie-consent (localStorage) |
Databeauty Tribe | Remembers your Accept/Decline choice below | Until cleared |
The session cookie and dbt-theme are essential to how the site works —
they are set automatically and are not part of the choice below.
The banner
The first time you visit, a banner at the bottom of the page asks whether
we may use Google Analytics. The Google Analytics script — the thing that
actually sets the _ga cookies — does not load until you press Accept.
If you press Decline, it never loads. You can change your mind at any
time from Cookie Preferences in the footer of every page.
Who else sees your information
| Company | What they receive | Where |
|---|---|---|
| Neon | The database: names, emails, phones, registrations, submissions | Germany (AWS Frankfurt) |
| Render | Hosting, including server logs with IP addresses | TODO: confirm the Render region |
| Brevo | Newsletter email addresses | TODO: confirm Brevo's data region |
| Resend | Email addresses, to deliver mail we send you | TODO: confirm Resend's data region |
| Google Analytics | Browsing behaviour tied to a cookie identifier | Global |
| Google Fonts | Your IP address, because fonts load from Google servers | Global |
We do not sell your information, and we do not share it for anyone else's advertising.
Your data leaves Nigeria
Our database runs in Frankfurt, Germany. Our other providers are based outside Nigeria. This means information about you is transferred abroad and stored there.
TODO: state the lawful basis for cross-border transfer under the NDPA, and whether you rely on adequacy, contractual clauses, or consent. This needs legal advice; do not guess.
How long we keep it
TODO: set a retention period for each of the following, then replace this block. A policy that says "as long as necessary" and nothing more is not a real answer.
- Newsletter subscribers, after they unsubscribe
- Member accounts, after someone stops taking part
- Training registrations and payment records
- Business Challenge submissions and judges' notes
- Contact form messages
Your rights
Under the Nigeria Data Protection Act you can ask us to:
- Show you the information we hold about you
- Correct anything wrong
- Delete your information
- Stop using it for a particular purpose
- Withdraw consent you previously gave, including for the newsletter
Write to databeautytribe@gmail.com and we will respond. TODO: commit to a response time. Thirty days is the common standard; confirm what the NDPA requires.
You can unsubscribe from the newsletter using the link in any email we send, without contacting us at all.
Security
Your connection to this site is encrypted. Our database connection is encrypted. Passwords are hashed with bcrypt and never stored in a readable form. Access to member records is limited to Databeauty Tribe administrators.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information, we will tell you. TODO: confirm the NDPC breach notification deadline and state it here.
Children
This site is for working professionals and is not directed at children. TODO: set a minimum age and say how it is enforced at sign-up, if at all.
Changes to this policy
When we change this policy we will update the date at the top. If a change matters to you, we will say so rather than rely on you noticing.