Privacy Policy
Effective Date: 2026-07-02
Last Updated: 2026-07-02
EDUTEK (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services. Please read this policy carefully. If you do not agree with the terms, do not access or use our services.
1. Information We Collect
We collect information that you voluntarily provide to us when you register, use the platform, or communicate with us. The types of information we collect include:
- School Information: School name, address, email, phone number, subscription plan, payment history, and tax identification number (if provided).
- Student Information: Student names, admission numbers, class assignments, date of birth (optional), parent/guardian contact details, attendance records, academic results (scores, grades), fee payment records, and any other data necessary for school management.
- Teacher & Administrator Information: Names, email addresses, phone numbers, login credentials (hashed), role permissions, teaching subjects, assigned classes, and activity logs.
- Parent/Guardian Information: Names, relationship to student, phone numbers, email addresses, and notification preferences.
- Payment Information: Transaction references, amounts, dates, and payment method (card, bank transfer, USSD). We do not store full card numbers – all payments are processed by Paystack, a PCI‑DSS compliant processor.
- Technical Data: IP address, browser type, operating system, device identifiers, and cookies (see Section 8).
- Usage Data: Pages visited, features used, time spent, and clickstream data to help us improve the platform.
2. How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain our services: Manage student records, mark attendance, conduct CBT exams, compute results, generate report cards, process fee payments, and send notifications.
- To improve user experience: Analyse usage trends, fix bugs, and develop new features.
- To communicate with you: Send service updates, payment confirmations, exam reminders, attendance alerts, and responses to support requests.
- To process payments: Bill your school for subscriptions and AI credits via Paystack.
- To ensure security: Detect and prevent fraud, unauthorised access, and other malicious activities.
- To comply with legal obligations: Respond to lawful requests from government authorities or courts.
3. Legal Basis for Processing (for GDPR/UK users)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
- Contractual necessity: To perform our contract with your school (providing the management system).
- Legitimate interests: To improve our services, prevent fraud, and ensure security.
- Consent: For optional cookies and marketing communications (where you have given consent).
- Legal obligation: To comply with tax, anti‑money laundering, or court orders.
4. Data Sharing & Disclosure
We do not sell or rent your personal data. We only share information in the following circumstances:
- With service providers: We use trusted third‑party services for hosting (e.g., Namecheap), email delivery (e.g., SMTP), and payment processing (Paystack). These providers are contractually bound to protect your data and only use it for the specified services.
- For legal reasons: If required by law, court order, or governmental request, we may disclose your information.
- With your consent: In any other case, we will ask for your explicit permission before sharing.
- Business transfers: If we are involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you via email and/or prominent notice on our website.
5. Data Security
We implement industry‑standard security measures to protect your data:
- ✅ 256‑bit SSL/TLS encryption for all data transmitted between your browser and our servers.
- ✅ Passwords are hashed using bcrypt (salts included).
- ✅ Daily automated backups stored in a separate, encrypted location.
- ✅ Role‑based access control – teachers only see their classes, admins see their school only, tenant admins see all schools under their organisation.
- ✅ Regular security audits and penetration testing.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your data has been compromised, please contact us immediately.
6. Data Retention
We retain your personal data for as long as your account is active. After account termination (e.g., subscription expires and not renewed), we may retain your data for up to 90 days to allow for reinstatement. After that period, we will anonymise or delete your data, except where retention is required by law (e.g., tax records for 7 years).
You may request early deletion of your data at any time (see Section 7).
7. Your Rights & Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of all personal data we hold about you.
- Correction: Update inaccurate or incomplete data.
- Deletion: Request deletion of your data (subject to legal retention).
- Restriction: Limit how we use your data.
- Portability: Receive your data in a structured, machine‑readable format.
- Objection: Object to certain processing (e.g., direct marketing).
- Withdraw consent: For processing based solely on consent (e.g., optional cookies).
To exercise any of these rights, contact us at privacy@edutek.com.ng. We will respond within 30 days.
8. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience. Types of cookies we use:
- Essential cookies: Required for login, session management, and security. Cannot be disabled.
- Preference cookies: Remember your language or dashboard layout choices.
- Analytics cookies: Google Analytics (anonymised IP) to understand how users interact with our platform.
You can control cookies through your browser settings. However, disabling essential cookies will break core functionality.
9. Children’s Privacy
Our platform is used by schools to manage student data. We do not directly collect personal information from children under 13. All student data is provided by the school, which acts as the data controller. Parents should address any privacy concerns to their child’s school. If we become aware that we have inadvertently collected personal data from a child without parental consent, we will delete it promptly.
10. Third‑Party Links
Our platform may contain links to third‑party websites (e.g., Paystack, YouTube). We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.
11. International Data Transfers
Your information may be transferred to and processed in countries other than Nigeria (e.g., our hosting provider may have servers outside Nigeria). We ensure that such transfers comply with applicable data protection laws, either through Standard Contractual Clauses or adequacy decisions.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on this page with a new “Last Updated” date.
- Sending an email to registered school administrators.
- Displaying a prominent notice on your dashboard.
Continued use of the platform after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: privacy@edutek.com.ng
- Phone/WhatsApp: +234 805 241 4306
- Address: Personage Chambers, Suite 102, Chatti Plaza, No. 6 Sapele Street, Garki 2, Abuja, Nigeria
This Privacy Policy is effective as of 2026-07-02 and replaces any previous versions.