Tradexploits Privacy Policy

1. Introduction

Tradexploits (“Tradexploits,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, engage us for services, enrol in a Tradexploits Academy course, or otherwise interact with us.

Tradexploits is a technology and business solutions company. We build and operate our own software products including Winnni, our smart expense and budget tracker app, and other apps as they launch and we bring the same expertise to web and mobile app development, digital marketing, financial management and reporting, business support, and project management for clients across Africa and beyond.

This Policy does not cover our own apps. If you use Winnni or any other Tradexploits-built app, that app’s own, separately published Privacy Policy governs how your data is handled within that app. This Policy covers only the tradexploits.com website and our client/course services.

2. Who We Are

Tradexploits is operated by: Tradexploits. For any privacy question, request, or complaint, contact us at: info@tradexploits.com +234 906 266 0949 / +234 703 810 5096

3. Information We Collect

We collect information tied to a real function of our website or services:

• Personal Identification Information: name, email address, phone number, and, where relevant to a service engagement, company name and job title.
• Account Information: for Tradexploits Academy, a username and password for your student account (passwords are stored as secure hashes, never in plain text).
• Billing Information: billing name, email, and invoice or transaction reference for services or course fees. We do not collect or store your card number or bank account details directly, these are entered and processed by our third-party payment processor(s) (for example, Paystack) within their own secure checkout. See Section 5.
• Usage Data: pages visited, time spent, clicks, IP address, device information, and browser type, collected via standard website analytics and cookies (see Section 9).
• Marketing & Communications Data: your preferences, subscriptions, and communication history with us.
• Course Data: for Tradexploits Academy, your enrolment, progress, quiz/assessment results, and feedback.
• Other Information You Provide: content you share with us to deliver a service. For example, a CV or LinkedIn profile for our CV/resume services, a business plan draft for our proposal-writing service, or financial documents for bookkeeping and accounting engagements.

We do not currently operate a general online store or collect product-purchase or shipping data, as that line of business is not part of our current service offering.

4. How We Use Your Information

We use information for purposes including:

• providing, operating, and maintaining our website and services;
• delivering the specific service or course you’ve engaged us for (web/app development, digital marketing, financial management, business support, project management, or Academy courses);
• processing your payments for services or course fees;
• communicating with you, including responding to inquiries and sending updates you’ve opted into;
• personalising content and recommending relevant services or courses;
• improving our website and service delivery;
• monitoring and analysing website usage;
• detecting, preventing, and addressing fraud, security, or technical issues; and
• complying with legal obligations, including tax and accounting record-keeping.

We do not sell your personal data.

5. Legal Basis (where applicable, e.g. for users in the EU/UK)

• Your consent;
• Performance of a contract (e.g., the service or course agreement between us);
• Compliance with legal obligations;
• Legitimate interests (e.g., to improve our services, for marketing, and for security), balanced against your rights.

6. Sharing Your Information

We share your information only where necessary to deliver our services:

• Service providers who help us deliver our services. For example, our course-platform host, payment processor(s) such as Paystack, email/scheduling and project-management tools, and accounting/bookkeeping software we use on engagements.
• Subcontractors or specialist partners we bring in for a specific client engagement (for example, a specialist designer or a financial-reporting contractor), bound by confidentiality obligations consistent with this Policy.
• Law enforcement, regulators, or other governmental authorities, if required by law.
• In connection with a business transfer, merger, acquisition, or insolvency.

7. Data Security

We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, misuse, or alteration, including secure hosting, access controls, and encrypted transmission (TLS) for our website and client portals. However, no method of transmission over the internet or storage is 100% secure, so we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as needed to fulfil the purposes described in this Policy. For example, for the duration of a service engagement plus any period required for tax or accounting record-keeping, unless a longer retention period is required or permitted by law.

9. Cookies and Tracking Technologies

Our website uses cookies, web beacons, and similar technologies to operate correctly and to understand how visitors use the site. You can usually disable cookies via your browser settings, but this may limit certain features of the site.

10. Your Rights

Depending on your jurisdiction, you may have rights to:

• access your data;
• correct or update your data;
• delete your data;
• restrict or object to processing;
• receive your data in a portable format; and
• withdraw consent, where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 2.

11. International Transfers

Where your data is transferred to or processed in a country other than your own. For example, because a service provider hosts data outside Nigeria, we take reasonable steps to ensure adequate protection, such as data transfer agreements, standard contractual clauses, or confirming the recipient meets a comparable standard of protection, and, where the NDPA applies, the cross-border transfer conditions set out in that Act.

12. Nigeria – NDPA Disclosure

As a Nigeria-based company, we process personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and the NDPC’s General Application and Implementation Directive, 2025 (GAID). The Nigeria Data Protection Commission (NDPC) is our supervisory authority. As an early-stage business, Tradexploits does not currently meet the NDPA’s threshold for a Data Controller or Processor of Major Importance (DCPMI); we will register with the NDPC and file the required Compliance Audit Return if and when our processing activity reaches that threshold. In the event of a qualifying personal data breach, we will notify the NDPC and affected individuals without undue delay, and in any event within 72 hours of becoming aware of it, where required by the NDPA. You may lodge a complaint with the NDPC at [NDPC complaint contact – confirm at ndpc.gov.ng before publishing].

13. International Visitors and Clients (General)

Tradexploits’ primary market is Nigeria, with a growing client and student base elsewhere in Africa and, increasingly, internationally. If you access our website or engage our services from the EU/UK, we will honour applicable GDPR/UK GDPR rights (broadly equivalent to Section 10 above) on request. If you are a California resident, you may exercise CCPA/CPRA rights, including the right to know what we collect and to request deletion, by contacting us, we do not sell personal data, so there is nothing to opt out of in that respect. As our footprint in a given country grows, we will add a fuller, country-specific disclosure to this Policy.

14. Children’s Privacy

Tradexploits’ website and services, including Tradexploits Academy, are intended for individuals who are at least 18 years old, or the age of legal majority in their jurisdiction, consistent with the fact that our offerings involve paid contracts and professional/business services. We do not knowingly collect personal data from anyone below that age. If we become aware that we have inadvertently done so, we will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time, including as our service lineup or app portfolio changes. We will post changes on this page and update the “Last Updated” date. We will notify you of significant changes by email or via a notice on our site.

16. Contact Us

If you have questions about this Privacy Policy or about your data, please contact:

• Email: info@tradexploits.com
• Phone: +234 906 266 0949 / +234 703 810 5096