On this page
| Item | Detail |
|---|---|
| Document | EduLedga School Privacy Notice template (School Privacy Resources; for publication by each School on its own website and in the Platform) |
| Layer | Layer 3: School ↔ Parent/Student (TEMPLATE issued by the School as data controller; EduLedga is the processor) |
| Parties | Issued by [School legal name] (controller) to parents, guardians, pupils, applicants and staff. EDULEDGA INNOVATIONS LIMITED is named as processor and is not a party |
| Version | Template 1.0. School version: [School version and date] |
| Status | Final |
| Effective date | [Date the School adopts this notice] |
- [School name] is responsible for the personal information it holds about pupils, parents and staff.
- We use EduLedga, a Nigerian school-management platform, to keep records, take attendance, publish results and report cards, manage fees and send messages. EduLedga works for us under a written agreement and may not use your information for its own purposes.
- We collect only what we need to educate and care for your child and to run the school.
- A parent or guardian must give permission before a child under 18 gets their own online account, and before we publish a child's photo.
- You can ask to see, correct or delete information and can complain to us or to the Nigeria Data Protection Commission.
NOTE: This is a template. The School must replace every square-bracketed field and delete options that do not apply. Once adopted, this notice is the School's own notice; EduLedga does not publish it on the School's behalf except as a hosting service.
1. WHO WE ARE
1.1 [School legal name], trading as [School name], of [School address] ("the School", "we", "us") is the data controller of the personal data described in this notice under the Nigeria Data Protection Act 2023 ("NDPA"). Our privacy contact / Data Protection Officer is [Name], [email], [phone]. [Our NDPC registration number is [number] / We are registered with the NDPC as required.]
1.2 This notice covers all our campuses: [list campuses].
2. OUR SOFTWARE PROVIDER
2.1 We use EduLedga, provided by EDULEDGA INNOVATIONS LIMITED (RC 9591803), BDPA, Benin City, Edo State, Nigeria, to process school records on our behalf as data processor under a Data Processing Agreement (section 29 NDPA). EduLedga hosts the data on servers in France under the cross-border safeguards of sections 41 to 43 NDPA, uses its own self-hosted AI model for analytics and most AI features and DeepSeek's AI (in China) only to draft lesson notes from curriculum content and, if we enable it with your consent, to suggest report-card comments that a teacher reviews, and may not sell the data, use it for advertising or use it to train general-purpose AI models. EduLedga's privacy policy is at eduledga.io/legal/privacy.
3. WHAT WE COLLECT
3.1 About pupils: name, admission number, date of birth, sex, photograph, class, campus, attendance, assessments and test results, report cards, teacher comments, promotion records, timetable, certificates, fees, admissions application information and [where needed for care] medical information, allergies and special educational needs [delete if not collected].
3.2 About parents and guardians: name, relationship, phone, email, address, occupation [delete if not collected], fee and payment records, messages and consent records.
3.3 About staff: see our staff privacy notice [or include staff details here].
4. WHY WE USE IT AND OUR LAWFUL BASES
4.1 We use personal data for the following purposes and on the following lawful bases:
| Purpose | Lawful basis (s.25 NDPA) |
|---|---|
| Admitting and enrolling pupils | Steps at the parent's request before entering a contract; contract |
| Teaching, assessment, results and report cards | Contract with parents; public interest in education; education purpose in s.31(4)(b) NDPA |
| Attendance and safeguarding | Contract; legitimate interests; vital interests in emergencies |
| Pupil care (medical, allergy, special needs) | Explicit consent or another s.30 NDPA ground |
| School fees | Contract; legal obligation (accounting records) |
| Communicating with parents (in-app, email, SMS, WhatsApp) | Contract; legitimate interests |
| Giving a pupil under 18 their own EduLedga login and AI study tools | Parent/guardian consent (s.31 NDPA) |
| Publishing photos or videos of pupils on our website or publicity | Parent/guardian consent (Media Consent Form) |
| Statutory returns such as the Annual School Census | Legal obligation / public interest. Only totals by class, age and sex are shared with education authorities |
| Analytics and early-warning indicators for staff | Legitimate interests (assessed). Indicators are advisory; decisions are made by staff |
4.2 Decisions about promotion, repetition, discipline or exclusion are made by our staff, never by software alone (section 37 NDPA).
5. WHO WE SHARE IT WITH
5.1 EduLedga and its sub-processors (see eduledga.io/security/sub-processors); Paystack, which processes fee payments; examination bodies where a pupil is registered for an examination [e.g. WAEC, NECO, BECE board]; education authorities for statutory returns (aggregate only, unless the law requires individual records); other schools on transfer, with your knowledge; and authorities where the law requires or in an emergency. We do not sell personal data.
6. HOW LONG WE KEEP IT
6.1 [Insert the School's retention schedule. Suggested defaults are in the EduLedga Data Retention & Deletion Policy, e.g. admission register and final results kept long-term; report cards 6 years after leaving; fee records 6 years; unsuccessful applications 12 months.]
7. YOUR RIGHTS
7.1 You may ask for access to and a copy of your (or your child's) data, correction, deletion, restriction, objection, portability, human review of automated outcomes, and may withdraw consent at any time (sections 34 to 38 NDPA). Contact [School privacy contact]. You may also complain to the Nigeria Data Protection Commission (ndpc.gov.ng) (section 46 NDPA).
8. CHILDREN
8.1 We take into account each child's best interests (Child's Rights Act 2003). Pupils aged 13 and over may ask questions about their own data through their class teacher or the privacy contact.
9. CHANGES
9.1 We will tell you about material changes to this notice.