NDPA

Privacy notice

How we handle your school’s and your students’ data, under the Nigeria Data Protection Act.

Note: This is a summary ahead of public launch. The full, signable privacy policy and Data Processing Agreement are provided to schools during onboarding. For a copy now, contact us.

What we collect

To run your school, EduPrefect processes student records (enrolment, results, attendance, behaviour, health where you record it), guardian contact details, fee and payment records, and staff records. We process this on your school’s behalf as a data processor.

How we protect it

Role-based access controls, a full audit log on every record, and encryption in transit and at rest. Access to a minor’s record is logged for accountability. Payments are handled by licensed processors (Paystack, Monnify) — we do not store card details.

Your rights

Your school’s data is yours. You can export everything at any time, and request correction or erasure (anonymisation) of records in line with the NDPA. Parents can request their own and their children’s data through your school.

Contact

Questions about data protection? Email [email protected] or message us on WhatsApp.