Legal

Privacy policy

What we collect at enrolment, why we hold it, who else sees it, and how to get it corrected or deleted.

Last updated · · Applies to AI Creators Holiday Camp 2026

Who this covers

This policy covers the AI Creators Holiday Camp 2026, a 100% live online program for students aged 8–17, run from Nigeria. Enrolment is completed by a parent or guardian, not by the student. Where this page says “you”, it means the parent or guardian who enrolled. Where it says “your child”, it means the student named on that enrolment.

Data about a student is collected from you, with your consent, given by ticking the consent box on the enrolment form. We do not collect data directly from a student, and we do not ask a student to create an account with us.

What we collect

The enrolment form asks for 8 things, and nothing else:

  • Parent or guardian full name
  • Parent or guardian email address
  • Parent or guardian phone number
  • Student first name
  • Student age
  • Learning group — Junior Creators, Intermediate Creators or AI Innovators, set by the age you give
  • Cohort — morning or afternoon
  • Plan — Explorer, Builder or Innovator

There is 1 optional field: accessibility or learning notes. Leave it blank and nothing changes about the place your child gets. Fill it in and the instructor reads it before the first Monday.

We do not ask for a student surname, a date of birth, a home address, a school name, a photograph, or a card number. Payment is taken by our payment provider; we receive a transaction reference and a paid or unpaid status, never your card details.

2 more things are created after enrolment rather than collected from you: an attendance record for the 12 live sessions, and a recording of each session.

Why we collect each field

  • Your name, email and phone. To confirm the place, send the joining link, send weekly progress updates, and reach you the same day if a session moves. The phone number is also how WhatsApp support reaches you, if you use it.
  • Student first name. So the instructor can call your child by name and admit the right person from the waiting room.
  • Student age.To place them in the right learning group. The age also decides which AI tools they are allowed to touch — see the Child Safety Policy.
  • Cohort and plan. To build the class roster and to know which support you have paid for.
  • Accessibility notes. So an instructor can prepare before a session rather than improvise during one.
  • Attendance and recordings. To tell you whether your child was in class, to issue the Certificate of Completion, and to keep a record if a concern is ever raised.

Our lawful basis

We rely on 3 things, and each one covers a different part of what we hold:

  • Performing our agreement with you. Once you enrol we cannot deliver 12 live sessions without your contact details, the student first name, the group, the cohort and the plan.
  • Your consent as parent or guardian.This covers the optional accessibility notes, marketing email if you opt in, and any showcasing of your child’s work. You can withdraw consent at any time and we stop.
  • Protecting children in our care. Attendance, session recordings and any report made under the Child Safety Policy are kept because we cannot responsibly run a program for children without a record of what happened in it.

Who else sees it

This is the whole list:

  • Instructors and program staff. An instructor sees only the roster for the group they teach: student first name, age, learning group, cohort, plan, and accessibility notes. Instructors do not see your payment details.
  • The video-conferencing service we run live sessions on. It processes the joining name, the session recording, and connection data, on our instruction.
  • The email service we send program mail with. It processes your name and email address.
  • Our payment provider. It processes the payment and holds the card details we never see.

We do not sell data. We do not pass it to advertisers, data brokers, recruiters or other schools. We do not publish a student’s first name, image or work anywhere public without separate written permission from you.

Some of these services store data outside Nigeria, which means data about you and your child crosses a border. Email us and we will send the current list of providers, what each one holds, and where.

The one other case is a legal one: if a court or a regulator with authority over us requires disclosure, or if a child is at risk of harm and we have to refer a matter to the appropriate authorities, we disclose what is required and record what we sent.

Student work is never used to train an AI model

Nothing your child makes trains any AI model. Not the projects, not the prompts they write, not the class chat, not the recordings. We do not sell, licence or donate student work to any model developer, and we do not enrol student accounts in any training, research or improvement programme.

Where a lesson uses a third-party AI tool, it runs through an instructor-managed account with the tool’s training setting turned off wherever the tool offers one. Students are taught in week 1, before they touch a generative tool, never to put a real name, an address, a school, a phone number or a photograph of a person into a prompt. The Child Safety Policy sets out the tool rules in full.

Recordings

Every one of the 12 sessions is recorded from the moment it starts. A recording can contain your child’s first name, their voice, their camera image if the camera is on, their shared screen when the instructor hands it over, and anything they typed in chat.

Recordings go to enrolled families for the 2026 cohort and to program staff. They are not public, not posted to social media, and not sent to anybody who was not in the cohort.

Cameras are optional. A student can take part with the camera off and loses nothing — no marks, no certificate condition. If you would rather your child’s camera image never appeared in a recording, tell us before Monday, August 10, 2026 and we note it on the roster.

How long we keep it

  • Enrolment and payment records— 6 years from the last session, because that is how long we may need to show what was agreed and what was paid.
  • Session recordings— 12 months from the last session, then deleted.
  • Attendance records— 12 months from the last session.
  • Accessibility notes— deleted at the end of the program, unless you ask us to carry them into a future cohort.
  • Certificate records— student first name, learning group and completion date, kept indefinitely so a certificate can be reissued years later. Tell us if you would rather we did not.
  • Safeguarding reports— kept for as long as we are required to keep them, and reviewed every 2 years.
  • Marketing email list— until you unsubscribe, which is a one-click link at the bottom of every message.

Your rights as a parent or guardian

At any time, for yourself and for your child, you can:

  • Ask what we hold and get a copy of it.
  • Correct anything wrong — a misspelt name, the wrong age, a changed number.
  • Ask us to delete it. Before the program starts we can delete nearly everything. After it starts we keep the payment and safeguarding records described above, and delete the rest.
  • Withdraw consent for the optional things: marketing email, showcasing work, camera-on recording.
  • Ask for a portable copy of the data you gave us, in a common file format.
  • Object to something we are doing with it, and get an answer from a person rather than a form.

How to exercise them. Email [email protected]with “privacy” in the subject line, your child’s first name, and the email address you enrolled with. We acknowledge within 5 working days and complete the request within 30 days. If a request will take longer than 30 days we tell you why before day 30. There is no charge, and you do not need to give a reason.

If we get it wrong, say so in the same thread. If you are still not satisfied you can complain to the data protection authority that regulates us in Nigeria — email us and we will tell you which body that is and how to reach it.

Cookies and analytics

This site sets no advertising cookies and runs no third-party ad trackers. What it does set:

  • Cookies the site needs to work — remembering the plan you picked on the way to the enrolment form, and stopping a form from being submitted twice.
  • Aggregate page counts — how many people opened the pricing page, and which page they came from. Counted, not profiled. No cross-site tracking, no advertising audiences, no student-level analytics.

If we add a measurement or chat tool to this site, we name it on this page before it starts collecting anything. We run no analytics inside the live sessions.

Keeping it safe

Access to the roster and the recordings is limited to the instructors and staff who need it, on named accounts with 2-factor authentication. We do not keep enrolment data in a shared spreadsheet that anyone with a link can open. If data is ever lost or exposed, we tell the affected families and the relevant authority as quickly as we are able, and we tell you what we are doing about it.

When this policy changes

We update the date at the top of this page and email every parent enrolled in the current cohort. A change to what we collect, or to who sees it, is emailed at least 14 days before it takes effect.

Contact

Email [email protected]. Put “privacy” in the subject line and it reaches the person who handles these requests.

A note on this page

This is a program policy, not legal advice. It sets out how we run AI Creators Holiday Camp 2026 and what we ask of the families who enrol. It does not tell you what the law requires of you, and reading it does not make us your lawyers.

Before this page is published, have a qualified lawyer review it against the data protection, consumer and child protection rules that apply to us in Nigeria and to the families we teach.

The rest of the paperwork

3 more pages, then a person to email

Each of these covers something the others do not. Read the Child Safety Policy first if you are deciding whether to enrol.