Privacy Policy

We collect the following categories of data:

• Application and enrolment data — name, contact details, date of birth, nationality, academic qualifications, and uploaded credential documents.
• Account data — login credentials, authentication events, and portal activity needed to operate your student account.
• Academic records — course registrations, assessment submissions, examination results, and progression history.
• Technical data — IP address, device and browser type, and pages visited, collected automatically when you use this website.

Personal data is processed for the following purposes only:

• Assessing applications and administering admissions.
• Delivering teaching, assessment, and examination services.
• Maintaining academic records and issuing certificates and transcripts.
• Providing student support, guidance, and communications about your studies.
• Protecting the security and integrity of our systems, including abuse prevention.
• Meeting our regulatory obligations to the National Universities Commission and other authorities.

This website uses cookies and similar technologies. Strictly necessary cookies support session management and security and cannot be disabled without affecting core functionality.

We also use analytics measurement to understand how the site is used so we can improve it. Analytics data is aggregated and is not used to build advertising profiles or sold to third parties. You can block cookies through your browser settings; some features may not work correctly if you do.

We do not sell personal data. Data is shared only with service providers who process it on our instructions (for example, payment processors, hosting providers, and the learning platform), and with regulators or examination bodies where we are required to do so.

Where a provider operates outside Nigeria, we take reasonable steps to ensure your data continues to receive an equivalent level of protection.

Academic records are retained permanently, as is standard practice for degree-awarding institutions, so that qualifications can be verified in future. Application data for unsuccessful applicants is retained for up to two years. Technical and analytics data is retained for up to twenty-six months.

Subject to applicable law, you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to delete data we no longer have a lawful basis to keep.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and audit logging. No system can be guaranteed completely secure; if a breach affects your rights we will notify you and the relevant authority as required by law.

Questions about this policy, or requests relating to your data, should be sent to [email protected] or by post to Iconic Open University, Dutse Alhaji Interchange, Kubwa Expressway, FCT Abuja.

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission.

We may update this policy from time to time. Material changes will be announced on this page, and the date at the top of the contents rail will be revised.