This policy applies to all personal data the Academy processes, in any format (digital or paper), in the course of:
- Running the Academy's internal operations platform — the system of record for cohorts, beneficiaries, outcomes, donors, donations, funds, and expenses (see Section 7).
- Recruiting, enrolling, mentoring, and tracking outcomes for program beneficiaries.
- Soliciting, receiving, and acknowledging donations — cash and in-kind — from individuals, corporates, diaspora givers, and organizations.
- Operating the Academy's public website and donor portal, once launched (currently in design; see Section 17).
- Engaging staff, program staff, finance staff, mentors, and volunteers.
- Partnering with organizations that host interns or hire graduates.
It applies to everyone whose personal data the Academy processes:
- Beneficiaries — the youths enrolled in the program, and, where relevant, their parents or guardians.
- Donors — individuals, corporates, diaspora givers, and organizations that give money or in-kind gifts.
- Partner organizations — employers and other organizations in a formal or informal relationship with the Academy.
- Staff, program staff, finance staff, mentors, and volunteers.
- Visitors to the Academy's website and, once launched, its donor portal.
This policy does not, by itself, govern the privacy practices of third-party platforms the Academy refers beneficiaries to for training — Udemy, Coursera, Udacity, and similar. Those platforms are independent data controllers with their own privacy policies, and beneficiaries enroll with them directly; the Academy does not build or host courses itself. Where the Academy does process data about that enrollment — for example, logging that a beneficiary completed a course as an Outcome record — this policy governs that record.