Legal

Privacy & data protection notice

This notice explains how Babcock Business School (BBS), a school of Babcock University, handles personal data submitted through this website — including the eligibility check, application portal, CIBN registration, journal submissions and the publications shop. It is written to reflect our obligations under the Nigeria Data Protection Act, 2023.

Who is responsible for your data

Babcock Business School, Babcock University, Ilishan-Remo, Ogun State, Nigeria acts as the data controller for personal data collected through this website. Questions about this notice can be sent to admin.bbs@babcock.edu.ng.

What we collect and why

  • Identity & contact details (name, email, phone, address, country/state) — to identify you, respond to enquiries and deliver purchases.
  • Academic & professional details (qualifications, CGPA, institution, work experience, sector) — to assess eligibility and process applications for admission or the CIBN programme.
  • Documents you upload (CV, transcripts, certificates, manuscripts, proof of payment) — to verify your submission.
  • Transaction details (order reference, items, payment evidence) — to fulfil shop orders and confirm admission fees. We do not collect or store card numbers; payments are made by bank transfer outside this website.
  • Technical data (basic request and error logs) — to keep the site secure and working.

We only collect what is needed for these purposes. We do not knowingly collect data from anyone under 18, and applications are restricted to adult applicants.

Lawful basis

  • Consent — when you voluntarily submit a form or opt in to updates.
  • Contract — to process your application, registration or order.
  • Legal obligation — where record-keeping or reporting is required.
  • Legitimate interest — securing the platform and preventing abuse.

You may withdraw consent at any time; this does not affect processing already carried out.

Who can see your information

Access is limited to authorised BBS staff who need the data to do their work, and is enforced by role-based permissions in our admin area. Application records may be forwarded internally to the relevant programme coordinator.

We use trusted service providers for hosting, database, file storage, email delivery and AI-assisted eligibility screening. They process data on our instructions only. Some of these services operate outside Nigeria; where that happens we rely on providers that apply comparable safeguards. We never sell your personal data and never share it with third parties for their own marketing.

How we protect it

  • All traffic is served over HTTPS.
  • Uploaded documents are held in private storage and are only reachable by authorised staff through short-lived signed links.
  • Database access is governed by row-level security policies, so records are not publicly readable.
  • Staff accounts require authentication, are role-restricted, and are signed out automatically after a period of inactivity.
  • Passwords are handled by our identity provider and are never stored in plain text.
  • Administrative actions on applications are recorded in an audit trail.

How long we keep it

  • Eligibility checks: up to 24 months from your last activity.
  • Applications and supporting documents: for the admission cycle and then as required by university record-keeping rules.
  • CIBN and journal submissions: for the duration of the cohort or editorial process, plus any required archive period.
  • Shop orders: as needed for fulfilment and financial records.

When data is no longer needed it is deleted or anonymised.

Cookies and tracking

We use only the storage strictly necessary to run the site — for example keeping you signed in to the admin area, remembering your cart, and remembering that you have already completed an eligibility check on that device. We do not run advertising trackers or sell behavioural data.

Your rights and how to exercise them

You may request access to the personal data we hold about you, ask us to correct it, request deletion or restriction where applicable, object to certain processing, withdraw consent, or ask for a copy of the data you provided.

Email admin.bbs@babcock.edu.ng with your request and enough detail for us to identify your record. We aim to respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission.

We may update this notice as our services change; the current version always appears on this page.

See also our trust & security page.