Privacy Policy & NDPA 2023 Statement

1. Introduction & Data Controller

Summit University, Offa ("the University", "we", "our") is committed to safeguarding the personal data of its graduates, faculty, students, and associates. This Privacy Policy outlines our practices regarding data collection, processing, storage, and rights under the Nigeria Data Protection Act (NDPA) 2023 and international privacy standards.

The Data Controller is: Summit University, PMB 4412, Irra Road, Offa, Kwara State, Nigeria.

2. Lawful Basis for Processing

We process your data strictly under lawful grounds recognised by the NDPA:

• Statutory Academic Archives: Archiving graduation records, degrees conferred, matriculation numbers, and graduating sets is conducted under legitimate institutional statutory duties.
• Consent: Account creation, profile publication, email/phone visibility preferences, and networking features are activated solely upon your explicit consent.
• Contractual Performance: Providing access to the verified Alumni Portal, digital directory, and member services.

3. Data Subject Rights

Under the NDPA 2023, you hold full legal rights over your personal data:

• Right to Access: You can view all information held about you via your Member Dashboard.
• Right to Rectification: You can edit and update your career bio, contact details, employer, and skills anytime.
• Right to Granular Visibility: You hold the sovereign right to toggle whether your email, phone, location, and employer are Public, Alumni Only, or Private.
• Right to Erasure ("Right to be Forgotten"): You can request account deactivation, removing your profile from public directories while preserving mandatory academic archive integrity.
• Right to Lodge a Complaint: You may submit complaints to our Data Protection Officer or the Nigeria Data Protection Commission (NDPC).

4. Data Security Architecture

We employ state-of-the-art physical, electronic, and managerial procedures to safeguard data against unauthorized access, loss, or manipulation:

• All communication is encrypted via modern TLS/HTTPS certificates.
• Authentication tokens are hashed cryptographically using SHA-256 and stored in secured database clusters.
• Passwords are irreversibly hashed using standard Bcrypt encryption.
• Verification signatures are signed using secret application key HMAC algorithms to prevent matriculation spoofing.

5. Contact Data Protection Officer (DPO)

For questions, data access requests, or privacy inquiries:
Email: privacy@summituniversity.edu.ng / alumni@summituniversity.edu.ng
Address: Data Protection Office, Directorate of Alumni Relations, Summit University Offa, Kwara State, Nigeria.