Who we are
MustardHQ School is run by Mustard Innovations & Technologies Limited (“MustardHQ”, “we”, “us”), 8 Swomen Close, Rayfield, Jos, Nigeria. We are the data controller for personal data collected through school.mustardhq.org. We handle personal data in line with the Nigeria Data Protection Act 2023. Questions about this policy go to school@mustardhq.org.
What we collect
When you apply or pay
Your name, email address, WhatsApp number, city, current role, LinkedIn profile, experience level, your answer about why you’re applying, the program you chose and your payment plan.
When you pay
Payments are processed by Kora (Korapay). You enter your card or bank details on Kora’s checkout, not on our site, and we never see or store them. Kora tells us the payment reference, amount, currency, status and payment method.
When you join a waitlist
Your name (optional), email address and the program you’re interested in.
When you download the syllabus
The syllabus form asks for your name, email and WhatsApp number. These details stay in your browser to generate the download; they are not sent to us.
After you enrol
We ask fellows to complete an enrolment form on Google Forms and to join a cohort WhatsApp group. Google and WhatsApp collect that information under their own privacy policies. Other members of the WhatsApp group can see your name and phone number.
Automatically
Like any website, our hosting provider receives technical data such as your IP address, browser type and the pages you request, in server logs. Our fonts load from Google Fonts, which also receives your IP address. We do not use advertising or analytics trackers.
Why we use it
- To run admissions and the program (performing our contract with you): reviewing applications, taking payments, placing you in a cohort and studio pod, and contacting you about classes.
- To keep financial records (legal obligation): payment and refund records required by Nigerian tax and accounting law.
- To tell you when a program opens (your consent): waitlist emails. You can ask to be removed at any time.
- To keep the site secure and working (legitimate interest): server logs and fraud checks.
We do not sell your personal data or use it for advertising.
Who we share it with
- Kora (Korapay), to process payments.
- Google, which hosts the spreadsheet where we keep applications, payments and waitlist sign-ups, our enrolment form, and our fonts.
- WhatsApp (Meta), for the cohort group you choose to join.
- Our website hosting provider, which runs this site.
- Your employer, only if you choose the employer payment option and only as needed to arrange payment and progress reports.
- Authorities, when the law requires it.
Some of these providers store data outside Nigeria. Where they do, we rely on the safeguards they offer for international transfers, as the Nigeria Data Protection Act allows.
How long we keep it
- Application and enrolment records: for the length of your program and up to two years afterwards, so we can issue and verify certificates.
- Payment records: as long as Nigerian tax and accounting law requires.
- Waitlist sign-ups: until the program opens and we’ve told you, or until you ask us to remove you.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another provider. Where we rely on your consent, you can withdraw it at any time. Email school@mustardhq.org and we’ll respond within 30 days. If you’re not satisfied, you can complain to the Nigeria Data Protection Commission.
Cookies and local storage
This site doesn’t set advertising or analytics cookies. We store one item in your browser’s local storage: your answer to our cookie banner, so we don’t ask again. Kora’s checkout page, which is run by Kora, may set its own cookies to process your payment securely.
If we add analytics in future, we’ll only turn it on if you accept in the cookie banner, and we’ll update this policy first. You can change your choice at any time with “Cookie settings” in the footer.
Security
We keep access to applicant and payment records limited to the admissions team and use the security controls of the providers listed above. No system is perfectly secure, so if a breach puts your data at risk we’ll tell you and the regulator as the law requires.
Children
Our programs are for adults. We don’t knowingly collect data from anyone under 18.
Changes
We’ll post any changes on this page and update the date above. If a change is significant, we’ll tell enrolled fellows by email. See also our Terms and Conditions.