What we collect
- An assessment — your answers, and your name, company, role, work email and phone number. Optionally the country your business is in, which sets the currency on the spend question. Answers are stored with your result so a call can be prepared and the result reproduced.
- A webinar registration — your name, email and phone number, and which webinar you registered for.
- Enrol — your name, email, phone number, city and country, the pathway, currency and payment plan you chose, and any early-bird code.
- A payment — if you pay online, the payment is taken by Stripe on Stripe's own page. We never see or store your card number. We keep what you paid, in which currency, when, and Stripe's reference for it.
- Book a call — your name, email, phone number, organisation if you gave one, the topic, and your message.
- Talking to a programme advisor — your first name, email and WhatsApp number, and whether you ticked the optional box for future emails. We use them to reply about the programme by email, phone and WhatsApp.
- Newsletter — your email address and phone number.
- A programme waitlist — your name, email and WhatsApp number, and whether you ticked the box allowing us to call or message you about that programme. If you did not tick it, we keep the number but use only email.
- An instructor application — your name, email, phone number, location, LinkedIn profile if you gave one, your answers about teaching, cloud and AI experience and Saturday availability, your message, and the CV and cover letter you attach. The two files are held in our own private file store, are read only by the Academy team, and are used only to consider you for the role.
Every form carries a hidden field a person never sees; a submission that fills it in is treated as automated and discarded. We do not store your IP address with anything you send — only whether the device was a phone, tablet or desktop.
We also record which step of an assessment was on screen and whether it was finished, so we can fix questions people give up on. That uses a random identifier that lives in your browser tab and is never linked to you. There are no advertising cookies and no cross-site tracking. The only things kept in your browser are your progress through an assessment and your answer to the analytics question below.
If, and only if, you accept the analytics bar, we use Google Analytics to count page visits and see which pages help people. It sets cookies on your device and Google receives which pages you viewed and general information about your device and rough location. Nothing loads, and no cookie is set, unless you accept.
Some programme pages show a video hosted on YouTube. Nothing is loaded from YouTube until you press play. When you do, the video plays in YouTube's privacy-enhanced player, and YouTube (Google) may set cookies and receive your IP address and information about your device and viewing, under Google's privacy policy.
Why we are allowed to
- Your result, and the email copy of it — the service you asked for. Your result is never conditional on agreeing to marketing.
- A webinar you registered for — the confirmation, the joining link, the reminders before it starts and the replay afterwards are the service you asked for. Every reminder and replay email carries an unsubscribe link.
- A payment for a place you enrolled for — the contract between us, and the accounting records the law requires us to keep.
- A call you book, a reply to a form, the newsletter you signed up for — steps taken at your request.
- Marketing beyond that — your consent, given by ticking the box. Never assumed.
- Measuring where people abandon an assessment — our legitimate interest in a form that works, balanced by collecting nothing that identifies you.
Who else sees it
The companies below, each under a data-processing agreement, and nobody else. We do not sell your data and do not share it with advertisers or data brokers.
- Supabase — stores your answers, result, contact details and form submissions, and, if you apply to teach with us, the CV and cover letter you attach.
- Airtable — if you apply to teach with us, holds a copy of your application, including the CV and cover letter, in the Academy team's hiring tracker, so the team can review it and keep notes. Deleting your application removes it there too.
- Netlify — serves the site and runs the scoring and form functions.
- Resend — sends your result email, your webinar confirmation, your enrolment and payment emails, and our internal alerts.
- MailerLite — if you register for a webinar, sign up for the newsletter, or join the waitlist for a programme, holds your name, email and phone number (and, for a waitlist, your call-consent answer) on the list for that webinar, the newsletter or the programme and sends its reminders, replay, or news of places opening.
- Stripe — if you pay online, takes the payment. Stripe receives your name, your email and what you are paying for, and collects your card details itself, under its own privacy notice.
- Google Analytics — only if you accept analytics cookies; see what we collect above.
- YouTube (Google): only if you press play on a video on our programme pages; see above.
- Google Calendar — only if you book a strategy session.
Some of these process data outside Nigeria and the UK; transfers rely on the providers' standard contractual clauses.
Where we use AI, and where we don't
We use third-party AI models (Anthropic's Claude, and a fallback model, reached directly or through OpenRouter) for one job: reading our own webinar flyers and drafting the emails and social posts that announce a webinar. A flyer carries the speaker's name, role and photograph, which the speaker gave us to publish. The flyer and the drafts are also kept in our Google Drive. A person on our team reads and approves every word before anything is sent.
Nothing you send us through this site is given to an AI model: not your assessment answers, not a registration, not an enrolment, not a message. Assessment results are worked out by fixed arithmetic you could check by hand, and no decision about you is made by an AI.
How long we keep it
Contact details, answers and form submissions are kept for 24 months from our last contact with you, then the identifying fields are erased. What remains is an anonymous score we keep to understand how the assessment performs over time. Webinar registrations and enrolments follow the same rule; for a payment we keep the amount and date, without your name, because accounting law requires it.
You stay on a webinar's or a programme waitlist's MailerLite list until you unsubscribe or ask us to delete you. A deletion request is carried out there as well as in our own database. Stripe keeps its own record of a payment for as long as the law requires it to.
An instructor application, with its CV and cover letter, is kept for 12 months from the day it was sent, so we can come back to you for a later cohort, then erased. Ask and we erase it sooner; the files are removed from our file store at the same time as the record.
Your rights
Under the Nigeria Data Protection Act 2023, and the UK and EU GDPR where they apply to you, you can ask us to show you a copy of what we hold, correct it, delete it, stop using it for marketing, or object to or restrict other uses. Email support@cloudboosta.co.uk — you do not need to give a reason, and we respond within 30 days. Every marketing email carries an unsubscribe link that takes effect immediately.
If you are unhappy with how we handled a request, you can complain to the Nigeria Data Protection Commission or to the UK Information Commissioner's Office.
Changes to this notice
This notice is versioned, and the version in force when you submitted an assessment is stored with your consent record — so it is always clear which wording you agreed to. privacy-1.12 (28 October 2026) added videos played from YouTube. privacy-1.11 (26 October 2026) added the form for talking to a programme advisor. privacy-1.10 (23 October 2026) added a phone number, with its country code, to every form. privacy-1.9 (23 October 2026) added Google Analytics, which loads only if you accept it. privacy-1.8 (12 October 2026) named Airtable, which holds the Academy team's copy of instructor applications. privacy-1.7 (10 October 2026) added instructor applications on the careers page, including the CV and cover letter files. privacy-1.6 (10 October 2026) added the WhatsApp number and call-consent box on the programme waitlist. privacy-1.5 (9 October 2026) added the programme waitlist, whose names and emails are also held in MailerLite. privacy-1.4 (21 September 2026) added webinar registration, online payment through Stripe, MailerLite, and a plain statement of where we use AI and where we don't. privacy-1.3 (26 August 2026) moved form submissions from Netlify Forms into our own database and shortened the notice. No commitment made in an earlier version has been removed.