Privacy Policy & Data Protection
NG SIMS is committed to safeguarding student biodata, academic records, fee ledgers, and institutional information managed by Nigerian secondary and primary schools. This Privacy Policy outlines our data processing standards in strict accordance with the Nigeria Data Protection Act (NDPA 2023) and regulations of the Nigeria Data Protection Commission (NDPC).
Schools Own Their Data
Your school retains 100% exclusive ownership of all student, academic, and financial records.
Isolated & Encrypted
Tenant-level database isolation, TLS 1.3 in-transit encryption, and role-based permissions.
Zero Data Selling
We never sell, monetize, or display third-party advertisements against student or parent data.
1. Roles and Responsibilities (Controller vs. Processor)
Under the Nigeria Data Protection Act 2023:
- The Subscribing School (Proprietor, Board of Governors, or Principal) acts as the Data Controller, determining the purposes for collecting and managing student, parent, and staff information.
- NG SIMS acts strictly as the Data Processor, providing the secure cloud infrastructure, database hosting, calculation logic, and portal access necessary to carry out educational administration.
2. Categories of Information Processed
To operate the school management portal, the following types of information are uploaded and maintained by authorized school personnel:
Student Biodata & Health Records
Full legal name, admission number, passport photo, date of birth, gender, state/LGA of origin, residential address, blood group, genotype, emergency medical notes, and sibling relationships.
Parent & Guardian Details
Father/Mother/Guardian names, mobile phone numbers, WhatsApp contact, verified email addresses, occupation, emergency contact numbers, and parent portal authentication credentials.
Academic Assessments & Results
Continuous Assessment (1-CA or 2-CA) scores, project scores, terminal examination marks, subject remarks, class positions, teacher remarks, principal remarks, and generated broadsheets.
Bursary, Fees & Transaction Records
Tuition invoices, developmental levies, bank transfer reference numbers, partial payment records, scholarship notes, and digital receipts (we do NOT store raw debit card numbers).
3. Lawful Basis for Data Processing
NG SIMS processes personal and educational information strictly on the following lawful bases:
- Contractual Performance: Providing the school management platform, report card computation, and fee tracking subscribed to by the school.
- Statutory Compliance: Supporting mandatory academic records retention, broadsheet compilation, and state Ministry of Education reporting requirements.
- Legitimate Educational Interest: Facilitating parent communication, daily student attendance monitoring, and academic progress tracking.
4. Security Architecture & Data Protection Controls
We deploy multi-layered safeguards designed to prevent unauthorized access, tampering, or loss of institutional records:
5. Student Privacy & Protection of Minors
Because secondary and primary school students are minors under Nigerian law, student records are accessible exclusively through authorized school personnel and verified parents/guardians. NG SIMS does not permit direct open public indexing of student profiles, photos, or scores. Search engine bots are strictly prohibited from crawling school portal result subdomains.
6. Data Retention, Portability & Deletion
Schools maintain continuous access to their records for the duration of their termly subscriptions. In the event a school concludes its subscription:
- The school administrator may export all student nominal rolls, academic broadsheets, and bursary logs in standard Excel/CSV/PDF format prior to account closure.
- Schools may request complete database purging following regulatory record retention obligations.
7. Sub-processors & Third-Party Service Providers
NG SIMS only engages enterprise cloud infrastructure providers (such as Supabase, AWS, and Cloudflare) and licensed Nigerian payment gateways (such as Paystack, licensed by the Central Bank of Nigeria) necessary to provide hosting, database reliability, and payment confirmation. Each provider maintains strict enterprise compliance standards.
8. Rights of Parents, Staff and Data Subjects
In accordance with the NDPA 2023, parents, guardians, and staff members possess:
- The right to inspect their personal records and linked children’s profiles.
- The right to request rectification of inaccurate contact info or biodata through their school administration.
- The right to complain to the Nigeria Data Protection Commission (NDPC) if they believe their personal data has been mishandled.
9. Contact Our Data Protection Team
We respond to school data queries and compliance requests promptly.