Privacy Policy

The information we collect depends on how you interact with us and the services you use. It may include:

• Identity and contact information: Name, email address, phone number, and other contact details you choose to provide.
• Learner and account information: Learner profile details, account identifiers, course registration information, and learning preferences. We do not collect your account password in readable form.
• Learning and assessment information: Course progress, assessment submissions, certificates, and participation within Ximil Learn.
• Enquiry and application information: Information submitted through enquiry forms, programme interests, and professional/educational background.
• Payment and transaction information: Payment status and transaction references. Full payment card details are handled directly by third-party payment providers, not Ximil.
• Organisation and client information: For institutional interactions, we collect business contact details, roles, and relevant organisational information.
• Technical and usage information: IP address, browser information, pages visited, and diagnostic information collected via our website or service providers.
• Photos, videos and testimonials: Processed in connection with training, events, or projects, with appropriate consent obtained where required for promotional purposes.

We may collect personal information:

• Directly from you when you complete a form, register, apply, or contact us.
• Through your use of Ximil Learn, including course and assessment activity.
• Through payment providers when a payment is made or verified.
• Through cookies, analytics and similar technologies.
• From an organisation or institution in connection with a programme involving you.

We may use personal information for the following purposes:

• Responding to enquiries and processing applications.
• Creating and managing learner accounts, and providing access to learning resources.
• Tracking learning progress, assessments, and issuing certificates.
• Processing and reconciling payments.
• Communicating programme updates and managing institutional relationships.
• Improving the functionality, security, and performance of our platforms.
• Sending marketing communications where permitted.
• Meeting legal, regulatory, or contractual obligations.

We will not use personal information for purposes that are incompatible with the purpose for which it was collected, unless permitted by applicable law.

Where required by applicable data protection law, we process personal information on an appropriate lawful basis, which may include:

• Contract: Necessary to provide a service or administer enrolment.
• Consent: Where you have given consent for a specific purpose (which you may withdraw at any time).
• Legal obligation: Necessary to comply with legal requirements.
• Legitimate interests: Pursued by Ximil, provided your rights do not override those interests.

We may share personal information with service providers and other parties where necessary and lawful, including:

• Hosting, cloud infrastructure, and database providers.
• Authentication and LMS technology providers.
• Payment processors (e.g., Paystack).
• Analytics and communication service providers.
• Schools, institutions, or authorised programme partners.
• Professional advisers or regulators where legally required.

We do not sell personal information as a standalone commercial product.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including maintaining learner records (typically 7 years) and meeting legal obligations. When information is no longer required, we securely dispose of it.

We use appropriate technical and organisational measures to protect personal information against unauthorised access. While no system can be guaranteed to be completely secure, we take reasonable steps to protect entrusted information.

Subject to applicable law, you may have the right to:

• Be informed about how your information is processed and request access to it.
• Request correction or deletion of your information.
• Request restriction of processing or object to certain processing.
• Request data portability.
• Withdraw consent.

To exercise a right, contact us at hello@ximilglobal.com.

Where we process a child's personal information through institutional programmes, we take appropriate steps and comply with applicable legal requirements, including obtaining parental/guardian consent where required.

For questions, concerns or requests relating to this Privacy Policy or your personal information, contact: