Privacy policy

Unlock It Now, trading name of the sole proprietorship under the law of Benin operated by Medard Kafoutchoni (RCCM RB/ABC/21 A 35546, IFU 0202113341055).

Email: [email protected]

No data protection officer is appointed: the size of the activity does not require one.

Qualification form: name, email address, WhatsApp number, country, age, academic background, grade average where applicable, professional experience, goal, target countries, timeline, motivation, obstacles, English level, CV status, budget intent, previous applications.

Client space: account email address, first name, country of nationality and residence when provided, current and target study level, English level, field of study, saved opportunities and the application stages you record.

Technical data generated by the host, including IP address and server logs.

Opportunity alerts: first name, email address, WhatsApp number if provided, nationality, current degree, target level, field of study and funding preference, plus the date and version of your consent. They are used only to send matching opportunities and deadline reminders, and are not merged with the assessment.

My Strategic Shortlist: first name, email address, WhatsApp number if provided, nationality, current degree, target level, field, funding preference and goal, to prepare the requested selection and contact you about it.

Answering a request for an assessment or for information: steps taken at your request prior to entering into a contract. Without these details the request cannot be handled.

Analysing your profile and sending you guidance: your consent, given when you complete the form. You may withdraw it at any time, without affecting what was done beforehand.

Delivering a support service you have purchased: performance of the contract between us.

Telling you about opportunities that may concern you: your consent, separate from the above and withdrawable through the unsubscribe link in every message.

Producing and keeping accounting and contractual records: compliance with legal obligations to which we are subject.

Keeping the site secure and preventing fraudulent use: our legitimate interest in protecting the service and the people who use it.

Opportunity alerts: sending the opportunities that match your profile and deadline reminders, on the basis of your consent, which you can withdraw at any time through the link in every email.

Form answers are analysed automatically, with the assistance of artificial intelligence, producing a score, a segment and a recommended offer. This analysis informs how enquiries are prioritised and what proposal you are made.

No decision producing legal effects is taken on that basis alone: every commercial proposal is reviewed by a person before it is sent.

You may request human intervention, express your point of view and contest the outcome of this analysis.

Cloudflare (United States) : site hosting.

Airtable (United States) : enquiry and case tracking.

Brevo (France) : email and alerts.

n8n self-hosted at Hetzner (Germany) : internal orchestration.

Selar (Nigeria), Chariow / Axa Zara LLC (United States, servers in Paris) and Stripe: payment processing, depending on the sales channel.

Zoom (United States) : online workshops and individual sessions.

Zoho Mail (Zoho Corporation): sending opportunity alert emails.

No data is sold.

Several of these providers are established outside the European Union, notably in the United States and Nigeria. These transfers rely on the contractual safeguards each provider offers.

The detail per provider is being verified and this section will be refined as each safeguard is confirmed.

Assessment request with no follow-up: three years from your last contact.

File of a person we support: the duration of the engagement, then five years from its end, matching the limitation period applicable to contracts.

Accounting records and invoices: ten years, as required by accounting rules.

Consent to receive information: three years from your last contact, or until it is withdrawn if that happens sooner.

Technical logs of the site and internal systems: twelve months.

Opportunity alerts: until you unsubscribe, then three years solely as proof of consent and of its withdrawal.

At the end of these periods data is deleted or anonymised. Data that must be kept to meet a legal obligation is archived separately, with access restricted to those who need it.

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.

If you live in the European Union, you may lodge a complaint with the competent supervisory authority in your country of residence.

To exercise these rights, write to [email protected].

Public pages use no advertising cookies and run no third-party analytics tool.

When you sign in to the client space, a strictly necessary session cookie named __Host-uin_session keeps you authenticated. It expires after twelve hours, or after fourteen days if you explicitly choose to stay signed in.

This cookie uses the Secure, HttpOnly and SameSite=Lax protections, is not accessible to page scripts and is not used to track you across other sites.

If you create an alert, your matching criteria (nationality, levels, field, funding preference, without email or phone number) are stored in your browser's local storage to show compatibility on the briefs. They do not leave your device this way, and you can erase them by clearing the site's data.

To measure which pages are useful, the site anonymously counts clicks on its offer and sharing buttons (button name, fiche concerned, campaign tags). No cookie, no IP address and no visitor identifier is stored, and nothing is passed to a third party.

If an analytics tool, an advertising pixel or a third-party form setting other cookies is added, this page will be updated before it goes into service.

The site is served over HTTPS only. Client areas are protected by authentication and are not indexed by search engines.

Files identifying individuals are kept separately from the site's source code and are never committed to a code repository. Access is limited to the people actually working on the file.

No payment card data is collected or stored by us: payments are handled directly by the providers listed above, on their own infrastructure.

Access to third-party tools is individual and protected by two-factor authentication wherever the provider offers it.

No measure makes a system impregnable. Should a data breach be likely to result in a risk to your rights, you would be informed in accordance with applicable law.

This policy may change, in particular if we add an analytics tool, a new provider or a new purpose of processing.

The date of the latest update appears at the top of the page. Where a change materially affects your rights or the purposes pursued, the individuals concerned whose email address we hold are informed directly.

Earlier versions are not archived publicly: you may request a copy at the address given above.