Privacy Policy

1. Introduction

Rainbow Bridge College ("Rainbow Bridge College", "the College", "we", "us", or "our") respects the privacy of students, parents, guardians, prospective families, staff, visitors, and other users of our website.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website, submit an enquiry, or otherwise communicate with us through the website.

Rainbow Bridge College operates primarily in Nigeria. We process personal data in accordance with applicable Nigerian data protection law and, where applicable, relevant international privacy laws.

2. Scope of This Policy

This Privacy Policy applies to personal information processed through:

• the Rainbow Bridge College website;
• website contact and enquiry forms;
• admissions enquiry forms that do not constitute a formal application;
• messages submitted through the website;
• website security and server logs; and
• related website services operated on behalf of Rainbow Bridge College.

This policy does not automatically apply to separate student portals, payment platforms, learning-management systems, formal admission systems, employee systems, or third-party services that may have their own privacy notices.

If those services are introduced, additional privacy notices may apply.

3. Personal Information We Collect

4. Information We Do Not Intentionally Collect Through the Website

At launch, the website is not intended to collect:

• payment-card information;
• passwords for student or parent accounts;
• biometric information;
• medical records;
• examination records;
• government identification numbers;
• detailed academic records; or
• other sensitive student records.

Users should not submit this information through general contact forms.

5. How We Use Personal Information

We may process personal information to:

• respond to enquiries;
• provide information about the College;
• respond to questions about admissions, academics, facilities, programmes, events, or technical bootcamps;
• arrange follow-up communication requested by you;
• maintain records of correspondence;
• operate and maintain the website;
• protect the website against spam, abuse, attacks, fraud, or unauthorised access;
• diagnose technical problems;
• improve website performance and accessibility;
• comply with legal and regulatory obligations;
• establish, exercise, or defend legal rights; and
• protect the safety, rights, and interests of the College, its students, staff, visitors, and community.

Information submitted through a general enquiry form will not automatically enrol a student, create a student account, or constitute acceptance into Rainbow Bridge College.

6. Lawful Bases for Processing

Depending on the circumstances and applicable law, we may rely on one or more lawful grounds for processing personal information, including:

• your consent;
• taking steps at your request before entering into an arrangement with the College;
• our legitimate interests in responding to enquiries, administering the College, maintaining records, operating our website, and protecting our systems;
• compliance with legal obligations;
• protection of vital interests where necessary; or
• another lawful basis permitted by applicable law.

Where processing depends on consent, you may withdraw that consent, subject to applicable legal requirements. Withdrawal does not affect processing that was lawful before consent was withdrawn.

7. Children and Young People

Rainbow Bridge College serves children and young people, and we recognise that their personal information requires particular care.

General website contact forms are primarily intended for parents, guardians, prospective parents, adult visitors, and other persons capable of providing valid information to us.

A person under 18 should obtain the involvement of a parent or legal guardian before submitting personal information through the website where consent is required. Children should not submit sensitive personal information through general contact forms.

Where we become aware that personal information belonging to a child has been submitted without an appropriate legal basis or required parental or guardian involvement, we may delete the information, restrict its use, or contact the parent or guardian as appropriate.

8. Student Photographs and Media

The public website may contain photographs, videos, awards, project demonstrations, competition results, or other material relating to College activities.

Publication of identifiable student media should be managed under the College's separate student-media, parental-authorisation, safeguarding, and consent procedures.

The website contact form is not used to obtain general rights to publish a child's image or personal information. Parents or guardians who have concerns regarding published student media may contact the College using the privacy contact details.

9. Cookies and Similar Technologies

The website may use cookies, local storage, or similar technologies that are necessary to:

• provide website functionality;
• maintain security;
• prevent abuse;
• remember privacy preferences; or
• maintain technical performance.

At launch, Rainbow Bridge College does not intend to use personal information collected through the website for behavioural advertising.

10. Analytics

We may use privacy-conscious website statistics to understand general website usage and performance. Where analytics tools require cookies, identifiers, or consent under applicable law, those technologies should only operate after the required consent or other lawful condition has been satisfied.

We do not intend to use website analytics to make decisions about whether a student should be admitted to the College.

11. How We Share Personal Information

We do not sell personal information submitted through the website.

We may disclose limited personal information where reasonably necessary to:

• authorised Rainbow Bridge College staff;
• website hosting providers;
• cloud infrastructure providers;
• email and communication providers;
• website developers or technical support providers;
• security and anti-abuse service providers;
• professional advisers;
• regulators, courts, law-enforcement agencies, or public authorities where disclosure is legally required; or
• another party where necessary to protect legal rights, safety, or security.

12. Cloud Services and International Transfers

Rainbow Bridge College may use cloud and technology providers whose infrastructure or personnel operate outside Nigeria. This means personal information may, in some circumstances, be stored, processed, accessed, backed up, or otherwise handled in another country.

Where Nigerian or other applicable data-protection law restricts international transfers, Rainbow Bridge College will take appropriate steps to ensure that the transfer has a lawful basis and appropriate safeguards.

13. Firebase and Cloud Infrastructure

The College website may use Google Firebase, Google Cloud, or comparable cloud services for hosting, databases, security, or related infrastructure.

Where such providers process personal information on behalf of Rainbow Bridge College, the College will seek to configure the services appropriately and use available data-processing and security arrangements.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, security, administrative, and record-keeping requirements.

As a general operational rule:

• routine website enquiries should normally be reviewed for deletion within 12 months after the last meaningful interaction;
• information connected to an ongoing matter may be retained until that matter is completed;
• security logs may be retained for a shorter or longer period where reasonably required for security investigations; and
• information may be retained longer where required by law or necessary for legal claims.

15. Data Security

Rainbow Bridge College takes reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, inappropriate disclosure, misuse, and destruction.

Measures may include encryption in transit, access controls, restricted administrative privileges, secure cloud infrastructure, logging, backups, software updates, and security monitoring where appropriate.

16. Data Breaches

Where a personal-data breach occurs, Rainbow Bridge College will investigate the incident and take reasonable measures to contain and remedy it.

Where notification is legally required, the College will notify the appropriate regulatory authority and affected individuals within the periods required by applicable law.

17. Your Privacy Rights

Depending on the law applicable to you, you may have rights concerning your personal information, including the right to:

• be informed about processing;
• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion where legally permitted;
• request restriction of certain processing;
• object to certain processing;
• withdraw consent where processing depends on consent;
• request data portability where applicable;
• object to certain automated decisions where applicable; and
• complain to an appropriate data-protection authority.

To exercise a privacy right, contact: rainbowbridgecollege@gmail.com

18. Nigerian Data Protection Rights

Individuals whose personal information is protected by Nigerian law may also submit complaints to the Nigeria Data Protection Commission where they believe their personal information has been processed unlawfully.

We encourage individuals to contact Rainbow Bridge College first where appropriate so that we can investigate and respond to the concern.

19. European Economic Area Users

Where the EU General Data Protection Regulation applies to a particular processing activity, Rainbow Bridge College will process relevant personal information according to the lawful-basis, transparency, security, data-subject-rights, and international-transfer requirements applicable to that processing.

20. United Kingdom Users

Where United Kingdom data-protection or electronic-communications legislation applies, Rainbow Bridge College will apply the relevant requirements concerning lawful processing, privacy information, children's information, cookies, tracking technologies, and individual rights.

21. United States Children

The website is not intended to invite children under 13 in the United States to independently submit personal information through general contact forms.

Where United States children's privacy law applies and we have actual knowledge that regulated personal information has been collected from a child under 13, we will take appropriate measures, which may include obtaining verifiable parental permission or deleting the information.

22. Automated Decision-Making

Rainbow Bridge College does not use information submitted through general website contact forms to make solely automated decisions that produce legal or similarly significant effects concerning a person.

23. Marketing Communications

Submitting a general enquiry does not automatically subscribe you to marketing communications. Where the College introduces newsletters or promotional communications that require consent, users will be given an appropriate choice and a method of withdrawing that consent.

24. Third-Party Websites

Our website may contain links to third-party websites, social networks, video platforms, maps, competition websites, educational services, or other external resources. Rainbow Bridge College does not control the privacy practices of independent third parties.

25. Embedded Content

Pages may contain embedded videos, maps, social-media content, or other resources supplied by third parties. Such providers may process information independently when their content is loaded.

26. Changes to This Privacy Policy

We may update this Privacy Policy where our website changes, new services are introduced, our data-processing practices change, service providers change, or legal or regulatory requirements change.

The current version will be published on this page together with its effective or last-updated date.