We process personal data in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Nigeria's Data Protection Act 2023 (NDPA) and its General Application and Implementation Directive, and, for people in the United Kingdom and the European Union, the UK GDPR and the EU GDPR. Where laws differ, we apply the higher standard to you.
We never sell your personal data.
The controller of your personal data is Canadian operating company, registered name and corporation number to be published, Ontario, Canada. For naira and other African-currency payments, Nigerian operating company, registered name and RC number to be published, Lagos, Nigeria also processes payment data.
Data protection officer: name and contact to be published, as required under the NDPA. EU and UK representatives under Article 27 of the GDPR and UK GDPR: to be appointed and published.
You can reach us through the Contact page on this website or, if you are a member, through Support in your portal. A dedicated privacy and legal email address will be published here.
Account and profile data: your name, email address, phone number, country, city, time zone, track, occupation and, if you choose to add them, your company, LinkedIn profile, photo, birthday and short bio.
Enrolment and payment data: the intake, plan, amounts, currency and payment status. Card and bank details are entered with our payment providers (Stripe, Paystack and Flutterwave); we do not see or store full card numbers.
Programme data: lessons completed, workbook answers, Monthly Proof evidence you upload, pod attendance, XP, levels, badges, milestones, founder-session bookings, your Leverage Readiness Score answers and My Leverage Pledge.
Community and support data: posts, comments, messages to your pod, support tickets and your conversations with the Leverage AI Mentor.
Marketing and attribution data: the free events and lists you sign up for, your marketing choices, the referral code and campaign that brought you to us (kept for 60 days), and, only with your consent, analytics and advertising cookies.
Event data: registrations, attendance and your interest in a Leverage Regional Summit.
To provide the programme you enrolled in: your portal, pod, Pod Captain feedback, sessions, certificates and support (performance of a contract).
To take payments, issue receipts, prevent fraud, pay referral commissions and keep financial records (contract, legal obligation and legitimate interests).
To send programme messages you need, such as module unlocks, session reminders and payment notices (contract).
To send marketing emails or WhatsApp messages only where you have opted in, with a working unsubscribe in every message (consent, as required by Canada's Anti-Spam Legislation, the GDPR, the UK's PECR and the NDPA).
To improve the programme and publish aggregated insights, such as the Leverage Readiness Index, using anonymised statistics with a minimum group size of 50 (legitimate interests). No individual is identifiable in anything we publish.
To run analytics and advertising measurement only if you accept those cookies (consent).
Recent joins, the Leverage Map, the Pledge Wall, the Bell Wall, Hall of Fame stories and share cards show your first name, city, photo, pledge or milestone only if you opt in. The Leverage Map shows cities, never addresses or exact locations. Share cards never show money figures. You can change these choices at any time in your profile.
We operate from Canada and Nigeria, and our service providers may store or process data in other countries, including the United States and the European Union. We protect transfers with contractual safeguards such as the EU Standard Contractual Clauses and the UK transfer addendum, and with the transfer mechanisms required by the NDPA and PIPEDA's accountability principle.
We keep your account and programme data while you have access and for a limited period afterwards so you can return as an alumnus, then delete or anonymise it. We keep payment and tax records for as long as tax and accounting laws require. Marketing data is kept until you unsubscribe or ask us to delete it. Exact retention periods to be confirmed with counsel.
Depending on where you live, you can ask to access, correct, delete or export your personal data, to restrict or object to some uses, and to withdraw consent at any time (which does not affect processing before you withdrew it).
In Canada you may complain to the Office of the Privacy Commissioner of Canada; in Nigeria, to the Nigeria Data Protection Commission; in the UK, to the Information Commissioner's Office; and in the EU, to your local data protection authority. We would welcome the chance to resolve your concern first.
We respond to requests within the time the law sets, usually within one month (30 days under PIPEDA), and may ask you to confirm your identity first.
We use encryption in transit, access controls, secure sign-in cookies and least-privilege access for staff and captains. If a breach puts your rights at risk, we notify you and the relevant regulators as the law requires, including within 72 hours where the NDPA or GDPR applies, and we keep records of breaches as PIPEDA requires.
The programme is for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, please contact us and we will delete it.
We will post any update here with a new date, and tell members by email if a change is significant.
You can reach us through the Contact page on this website or, if you are a member, through Support in your portal. A dedicated privacy and legal email address will be published here.