Who we are
joinxan.com is run by [Company legal name] ("XAN", "we", "us"), [RC number], [registered address], Nigeria. We decide how your personal data is used, which makes us its data controller under the Nigeria Data Protection Act 2023. Questions about your data: [support email].
What we collect
- Your account: your full name, email address, phone number and password. The password is stored only as a secure hash that nobody can read.
- Your membership: the date you joined, whether you are a founding member, and your training progress: modules completed, quiz answers and scores, and your certificate.
- Payments: Paystack processes every payment. We receive the payment reference, amount, date and result, and the card type and last four digits Paystack shares with us. We never see or store your full card number.
- Orders and bookings: the name, phone number, email and delivery address you give at checkout, and the details of Group Trip and Concierge bookings, such as arrival dates and notes.
- Emails we send you: a copy of each email, such as receipts and order updates, so we can check or resend it. Login links are removed from our copy once sent.
- Security records: the IP address and browser used for each login attempt, to protect accounts and stop abuse.
Why we use it
- To run your account and membership and give you the training, Suppliers Connect and your certificate (to carry out our agreement with you).
- To take payments, deliver shop orders and arrange bookings (our agreement with you).
- To email you about your account, payments, orders and bookings (our agreement with you). We do not send marketing emails without your consent.
- To keep the site and your account secure, prevent fraud and fix problems (our legitimate interests).
- To keep the financial records the law requires (a legal obligation).
Who we share it with
We do not sell your personal data. We share only what each of these needs to do its job for us:
- Paystack, to process payments.
- Our hosting and email providers, who store the site and send its emails.
- Delivery partners, who receive the name, phone number and address for a shop order.
- Trip and Concierge partners, such as hotels and interpreters, when you book those services.
- Anyone you give your certificate code to: the public verification page shows the name on the certificate and the date it was issued.
- Authorities, when the law requires it.
Suppliers listed in Suppliers Connect do not receive your details from us. You decide what to share when you contact them.
Data processed outside Nigeria
Some of our providers, such as our hosting and email services, Google Fonts and video players, may process data outside Nigeria. Where they do, we rely on the safeguards the Nigeria Data Protection Act 2023 requires.
How long we keep it
- Account, membership and training records: while your account is open, and for [2 years] after it is closed.
- Payment, order and booking records: [6 years], for tax and accounting.
- Security records: up to [12 months].
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to:
- give you a copy of your personal data;
- correct anything that is wrong (you can also update your name and phone number yourself on your account page);
- delete your data, or limit how we use it, where the law allows;
- send your data to you or to another organisation in a common format;
- stop using your data for a purpose you object to.
Email [support email] and we will reply within [30 days]. If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
Keeping your data safe
Passwords are stored as secure hashes, the site runs over an encrypted connection, and only the people who need your data to do their work can see it. No system is perfectly secure, so keep your password private and tell us straight away if you think your account has been misused.
Children
XAN is for adults. You must be 18 or older to create an account.
Changes to this policy
If we change this policy, we will update the date at the top of this page, and email members about important changes.