Privacy policy
Version 1.0 · in force since 29 August 2026
1. Why this document
Enrolling on one of the Academy's courses means handing over personal
documents: proof of identity, a curriculum vitae, a qualification,
sometimes a student card. These are sensitive documents. This text sets out
what the Academy does with them, how long it keeps them, and how you take
back control of them.
2. Who processes your data
The data controller is PRIMA LAB ACADEMY, whose registered office is given
in the legal notice.
For any question about your data, write to contact@primaacademy.org, or
by post to BP 3316, Yaoundé, Cameroon.
3. What is collected, and why
When you register your interest
Name, e-mail address, telephone, professional profile, and where
applicable your availability and your message.
*Purpose*: to tell you when a session opens on the course you are
interested in, and to measure demand in order to decide whether to schedule
it.
At enrolment
Surname and first name, e-mail address, telephone, professional profile,
employer where applicable, and the price band requested.
*Purpose*: to process your enrolment, open your personal area, and contact
you about your session.
When you submit your application
Depending on the course and your profile: signed enrolment form, proof of
identity, curriculum vitae, qualification or academic evidence, student
card, employer funding letter, and — for workshops involving procedures
performed between participants — the signed informed consent.
*Purpose*: to check that you meet the conditions of access to the course
and to the price band requested, and to meet the Academy's obligations
regarding traceability of the training it delivers.
At payment
Amount, date, means of payment, and the proof of payment you upload.
*Purpose*: to record the payment and confirm your place.
️ The Academy takes no payment online. It collects, processes and
stores no banking data whatsoever: no card number, no account credentials.
The proof you upload is a document you have chosen to send.
During and after the course
Attendance by half-day, assessment results, the trainer's appraisal,
certificates issued and their numbers.
*Purpose*: to establish that the course has been validated, to issue the
corresponding documents, and to allow their later verification by a third
party you authorise by giving them the number.
4. On what basis
Depending on the case, processing rests:
- on performance of the training contract between you and the
Academy — for enrolment, the application, payment, assessments and
certificates issued;
- on your consent — for registering your interest, for the newsletter,
and for consent to practice between participants;
- on the Academy's legitimate interest in keeping a record of the
training it has delivered and the documents it has issued.
5. For how long
| Data | Retention |
|---|---|
| Registration of interest | :duree_interet from the request, or until you unsubscribe |
| Enrolment file and account | :duree_compte after the last course attended |
| Supporting documents uploaded | :duree_pieces after the end of the course |
| Training history and results | :duree_historique |
| Certificates issued and their numbers | :duree_documents |
| Log of administrative actions | :duree_journal |
Certificates issued and their numbers are kept longer than the rest: that
is what allows an employer to verify a certificate several years later.
This retention covers only the holder's name, the course, the date and the
number.
6. Who has access
The Academy's administrative staff, to process applications and follow
up courses.
Trainers, for the sessions they run and those only. A trainer sees
neither the applications, nor the supporting documents, nor their
colleagues' sessions. This restriction is enforced by the platform itself,
not merely by instruction.
No third party. Your data is neither sold, nor rented, nor passed on
for commercial purposes. It is disclosed to your employer only where they
fund your training, and only so far as that funding warrants.
The technical providers who host the platform do not access it in the
course of their hosting duties.
7. How your documents are protected
The documents you upload are **not reachable through a public web
address**. They are stored outside the directory served by the site, and
every consultation goes through a temporary signed link, valid for a few
minutes, issued only to an authenticated and authorised person.
Two independent checks apply to every access: the validity of the link, and
that person's right to see that particular document. One does not replace
the other.
Exchanges with the site are encrypted. Administrative actions are logged:
who did what, and when.
8. Your rights
You have a right of access, rectification, erasure,
objection and restriction in respect of your data.
In practice:
- Your contact details can be corrected directly in your personal area,
under “My profile”.
- You can unsubscribe from the newsletter in one click, using the link at
the foot of every mailing.
- For everything else — obtaining a copy of your data, requesting deletion
of your account, objecting to a processing operation — write tocontact@primaacademy.org. You will receive a reply within one month.
️ Some data cannot be deleted at your request: certificates issued and
their numbers must remain verifiable, otherwise a genuine certificate would
become impossible to check. Deleting your account therefore does not erase
the record of documents issued in your name; it removes everything else.
10. Changes
This policy may change. Its version and its effective date appear at the
top. Any substantial change is brought to the attention of account holders.