06 · Privacy Policy

Privacy Policy

How BridgeToWork Academy collects, uses and protects your personal information when you use our website and learner portal.

Who we are

BridgeToWork Academy (“BridgeToWork”, “we”, “us”) is a workplace readiness and professional development academy operating in Ghana. We are the data controller for the personal information described in this policy. You can reach us about anything in this policy at info@bridgetoworkacademy.com.

This policy applies to our public website, the learner portal, and the admin console used by our staff. It is written to comply with Ghana’s Data Protection Act, 2012 (Act 843).

What we collect

We only collect what the platform needs to run. Specifically:

  • Account details — your first and last name, email address, an optional phone number, and a password (stored only as a one-way hash; we never see or store the password itself).
  • Enrolment details — which audience you enrol as (recent graduate, professional or organisation), your enrolment status, and the dates you applied and were activated.
  • Payment records — the amount, currency, date, status and a payment reference for each fee you pay. Card and mobile-money details are entered directly with our payment processor, Paystack, and are never stored on our systems.
  • Learning records — which modules you have completed, your assignment, weekly-challenge and portfolio submissions (including any files you upload), quiz attempts and scores, instructor grades and written feedback, and confirmation of simulation participation.
  • Certificates — when you earn a certificate we record your name, the programme name, the issue date and a unique verification code.
  • Enquiries — if you use the contact form we keep your name, email, optional phone number, subject and message so we can reply.
  • Technical information — like most websites, our servers record basic request logs (such as IP address, browser type and the pages requested) for security and to keep the service running.

How we use it

We use your information to:

  • create and secure your account and let you sign in;
  • process your enrolment and payment, and issue a receipt;
  • deliver the programme — unlock modules, accept and grade your work, give feedback, and track your progress toward certification;
  • issue your certificate and let employers verify it;
  • send you the transactional emails described below;
  • respond to your enquiries;
  • keep the platform secure, prevent misuse, and diagnose problems.

Emails we send

We send service emails only: confirmation that we received your application, your payment receipt, password-reset links, notices when a new module opens, notices when your work has been graded or your portfolio reviewed, and replies to your enquiries. We do not send marketing or newsletter emails, and we do not share your email address with third parties for their own marketing.

Public certificate verification

Every certificate carries a verification code. Anyone who has the code — for example an employer you have shared it with — can enter it on our verification page and see the name on the certificate, the programme name and the issue date. Nothing else about you is shown. Codes are long and random, so a certificate cannot be looked up without the code you choose to share.

Who we share it with

We do not sell your personal information. We share it only with the service providers we need to run the platform, each of whom processes it on our instructions:

  • Paystack — processes fee payments (card, mobile money and bank transfer). Paystack’s own privacy policy applies to the payment details you enter with them.
  • Resend — delivers our service emails.
  • Bunny.net — streams lesson videos and stores the files you upload with your submissions and the feedback files your instructor returns.
  • Our hosting provider — runs the servers and database on which the platform operates.

Cookies and local storage

We use one cookie, and only because signing in requires it: a secure, HTTP-only session cookie named b2w_refresh that keeps you signed in for up to seven days. It contains a random token, not any of your personal details. We do not use advertising cookies or third-party analytics cookies.

The admin console also uses your browser’s local storage to save unsent grading drafts so instructors don’t lose work; this never leaves the instructor’s own browser.

How long we keep it

We keep your account and learning records for as long as your account is active, so that you can return to your work and your certification history. Certificate records are kept for as long as we operate the verification service, so that your credential remains verifiable. Payment records are kept for the period required by Ghanaian tax and accounting law. Contact-form enquiries are kept until they have been handled and for a reasonable period afterwards.

You can ask us to delete your account at any time (see “Your rights”). If you do, we will remove your personal information except where we must keep a record — for example a payment record, or the minimal name-and-date entry that keeps an issued certificate verifiable.

How we protect it

All traffic to the website and portal is encrypted (HTTPS). Passwords are hashed with a modern algorithm and are never stored in readable form. Access to learner records in the admin console is limited to BridgeToWork staff who need it to run the programme. Uploaded files are served only to the learner who submitted them and to authorised staff.

Your rights

Under the Data Protection Act, 2012 you have the right to ask what personal information we hold about you, to have inaccuracies corrected, to ask us to delete it, and to object to certain processing. You can update your name and phone number yourself in the portal. For anything else, email info@bridgetoworkacademy.com and we will respond within a reasonable time. You also have the right to lodge a complaint with the Data Protection Commission of Ghana.

Children

The programme is designed for final-year students, national service personnel, graduates and working professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If we change how we handle your information we will update this page and the date at the top. Where a change is significant we will also let you know by email.

Contact

Questions about this policy or your personal information: info@bridgetoworkacademy.com.

See also our Terms & Conditions.