Privacy Policy
CED Quiz Manager ("we", "us", or "our") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we keep it safe. We do not sell your personal data to third parties.
Information We Collect
We collect information you provide directly to us and information generated through your use of the platform.
Account Information — name, email address, phone number, organization name, and password when you register.
Participant Information — name, age group, gender, conference association, and quiz performance data for participants added to your account.
Payment Information — subscription payments are processed through Remita. We do not store full card details; we receive payment confirmation tokens only.
Usage Data — IP address, browser type, device information, pages visited, features used, and timestamps generated automatically during platform use.
We do not collect biometric data, government identification numbers, or sensitive religious beliefs beyond your voluntary Baptist Convention affiliation.
How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the platform | Contractual necessity |
| Processing subscription payments | Contractual necessity |
| Sending service-related notifications | Contractual necessity |
| Improving platform performance | Legitimate interest |
| Responding to support requests | Legitimate interest |
| Sending optional product updates | Consent (unsubscribe anytime) |
| Complying with legal obligations | Legal obligation |
Data Sharing & Disclosure
We do not sell your personal information. We may share information only in the following circumstances:
- Service providers — trusted partners who help us operate the platform (e.g., Remita for payments, hosting providers) under strict data processing agreements.
- Nigerian Baptist Convention — aggregate, anonymized statistical data for organizational reporting purposes only.
- Legal requirements — when required by Nigerian law, court order, or to protect against fraud and security threats.
- Business transfers — in the event of a merger or acquisition, data would transfer under the same privacy protections.
We will never share your data with advertisers, data brokers, or unaffiliated third parties for marketing purposes.
Data Security
We implement industry-standard security measures to protect your information:
- All data transmitted is encrypted using TLS 1.2+ (HTTPS)
- Passwords are hashed using bcrypt — we cannot read your password
- Database backups are encrypted at rest
- Regular security audits and vulnerability assessments
- Role-based access controls limiting staff data access
- Two-factor authentication available for admin accounts
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We will notify you within 72 hours of becoming aware of any data breach affecting your personal information.
Your Rights
Under the Nigeria Data Protection Regulation (NDPR) and applicable laws, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your personal data, subject to legal retention requirements.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdrawal of consent — withdraw consent for marketing communications at any time.
To exercise any of these rights, contact us at privacy@quiz.nigerianbaptist.org. We will respond within 30 days.
Cookies & Tracking
We use cookies and similar technologies to operate the platform and improve your experience.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session (essential) | Keep you logged in during your session | Session |
| CSRF token | Security — prevent cross-site request forgery | Session |
| Preferences | Remember your settings (e.g., language) | 1 year |
| Analytics | Understand how the platform is used (anonymized) | 90 days |
You can control cookies through your browser settings. Disabling essential cookies will impair platform functionality.
Children's Privacy
CED Quiz Manager is designed for use by church organizations, some of which involve youth participants. All participant accounts are created and managed by registered adult administrators — not children themselves.
We do not knowingly collect personal information directly from children under 13. Participant records entered by administrators are treated with the same protections as all personal data. If you believe we have inadvertently collected data from a child without appropriate oversight, please contact us immediately.
Data Retention
We retain personal information for as long as necessary to provide services and comply with legal obligations:
- Account data — retained for the duration of your subscription plus 2 years
- Participant records — retained while your account is active; deleted within 90 days of account closure on request
- Quiz results — retained for 3 years for organizational analytics, then anonymized
- Payment records — retained for 7 years as required by Nigerian tax law
- Server logs — retained for 90 days
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email and display a prominent notice on the platform at least 30 days before the changes take effect.
Your continued use of CED Quiz Manager after the effective date of changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: