Who we are and when this policy applies
Forvention is a cybersecurity risk management and compliance training platform operated by Forward Edge Consulting Ltd in Lagos, Nigeria. This policy applies to our website, organization-admin portal, learner portal, communications, and related services.
When an employer or other organization provides your account, that organization controls why your workplace information is processed and may have its own privacy notice. We process that information to provide the service under our agreement with the organization. For direct account, website, support, and commercial interactions, Forward Edge Consulting Ltd determines the purposes of processing.
Information we collect
Depending on how you use Forvention, we may process:
- Identity and contact details, including name, work email, telephone number, and organization.
- Workspace details, including organization name, country, industry, size, departments, roles, and organization code.
- Learning records, including assigned modules, progress, quiz and scenario responses, scores, badges, certificates, deadlines, and completion history.
- Security and account data, including password hashes, authentication cookies, trusted-device sessions, IP-derived approximate location, browser or device information, and sign-in activity.
- Billing and subscription records, such as plan, seat count, payment status, renewal dates, and transaction references. Payment providers process card or bank details under their own notices.
- Support, sales, and website information that you submit through forms, email, or other communications.
How and why we use information
We use personal information to:
- Create and secure accounts, verify devices, and provide requested platform features.
- Assign and deliver training, record progress, issue achievements, and produce compliance and risk reporting.
- Manage subscriptions, seats, service communications, support requests, and customer relationships.
- Prevent misuse, investigate security incidents, maintain audit records, and improve service reliability.
- Meet legal, regulatory, accounting, and contractual obligations.
Our legal bases may include performance of a contract, compliance with legal obligations, legitimate interests in operating and securing the service, and consent where the law requires it. An organization using Forvention is responsible for identifying its lawful basis for providing learner information to us.
Compliance insights and automated calculations
Forvention calculates progress, compliance indicators, engagement signals, and risk scores from training records and scenario responses. These outputs help learners and authorized organization administrators understand training readiness. They are decision-support tools, not guarantees of security and should not be used alone to make employment or other decisions that have a significant effect on a person.
International data transfers
Some infrastructure and service providers may process information outside Nigeria. Where a cross-border transfer occurs, we use a permitted transfer mechanism and appropriate safeguards required by applicable data-protection law, taking the destination and nature of the information into account.
Retention and security
We retain information for as long as needed to provide the service, maintain legitimate business and security records, satisfy contractual commitments, and meet legal obligations. The period depends on the account status, type of record, customer instructions, and applicable limitation or retention requirements. We delete or de-identify information when it is no longer reasonably required, subject to backups and lawful recordkeeping.
We apply administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, so account holders must protect credentials and promptly report suspected unauthorized access.
Your privacy rights
Subject to the Nigeria Data Protection Act 2023 and other applicable law, you may have rights to request access, correction, deletion, restriction, objection, or portability; withdraw consent where processing relies on consent; and complain to the Nigeria Data Protection Commission. These rights are not absolute and may depend on the context.
If your account is managed by an employer or another organization, contact that organization first for requests concerning workplace learning records. You may also contact us, and we will assist the organization as required. We may verify your identity before completing a request.
Children and changes to this policy
Forvention is designed for organizations and workplace learning and is not directed to children. Do not create an account for a child unless the use is lawful and specifically agreed with us.
We may update this policy when the service, our practices, or legal requirements change. We will publish the revised version here, update its effective date, and provide additional notice where a material change requires it.
Questions or requests
Contact Forvention
Email us about these terms, privacy rights, or how your information is handled.