Privacy Policy

Last updated: 27 March 2026

This policy describes how SchoolHubNG handles personal data in line with Nigerian data protection standards. It is intended as a practical summary for users of the platform. You should have it reviewed by qualified legal counsel to confirm it matches your legal entity name, data practices, and any registration or appointment requirements (for example, with the Nigeria Data Protection Commission).

1. Who we are

SchoolHubNG provides a school management software platform (the “Service”) to registered schools and their authorised users. For personal data processed in connection with the Service, the data controller is the legal entity operating SchoolHubNG (referred to as “we”, “us”, or “SchoolHubNG”).

Contact (privacy and general enquiries):
Email: support@schoolhubng.com.ng
Address: 37 Adekunle Banjo Avenue, Off CMD Road, Magodo, Lagos, Nigeria

If we appoint a Data Protection Officer or dedicated privacy contact, we will publish those details here and in our dashboard where appropriate.

2. Scope

This policy applies to personal data we process when you visit our public website, register a school, use admin/staff tools, or use student, parent, or public payment features we host. It should be read together with our Cookie Policy and Terms of Service.

Schools and personal data. Schools that use SchoolHubNG typically act as independent controllers for much of the information they upload about students, parents, and staff. We process that information on their instructions to provide the Service. This policy explains our role; your school may provide you with its own privacy notice.

3. Categories of personal data we may process

Depending on how you use the Service, we may process:

• Account and school data: school name, subdomain, contact details, verification data, billing-related information where applicable.
• Staff and admin users: names, emails, phone numbers, roles, login and security-related data.
• Student and parent data (entered by the school or users): identifiers, names, class and academic information, fee and payment records, parent/guardian contact details, and other fields your school chooses to store.
• Transaction and payment data: payment references, amounts, status, and limited data needed to reconcile fees. Card and other online payments are processed by Paystack; SchoolHubNG does not collect or save card details at any point.
• Communications: messages you send to support, system notifications, and optional channels (such as email or SMS) where enabled.
• Technical and usage data: IP address, device/browser type, approximate location derived from IP, timestamps, logs needed for security, troubleshooting, and service improvement.
• Content you upload: documents or images your school attaches where the product allows it.

4. How we use personal data and legal bases

Under Nigerian data protection law, we rely on one or more of the following, as appropriate:

• Performance of a contract — to register your school, provide the Service, authenticate users, process fee workflows, and give support.
• Legitimate interests — to secure the platform, prevent fraud and abuse, improve reliability, analyse aggregated usage, and manage our business, where those interests are not overridden by your rights.
• Legal obligation — where we must comply with applicable law, court orders, or lawful requests from regulators.
• Consent — where we ask for it (for example, certain marketing communications or non-essential cookies, if we use them). You may withdraw consent where processing is based on consent.

We do not sell your personal data.

5. Sharing and processors

We share personal data only as needed to run the Service, including with:

• Payment providers (such as Paystack) for online payments and verification.
• Hosting and infrastructure providers that store or process data on our behalf.
• Email and messaging providers used to send transactional or service messages, and optional SMS or messaging integrations if your deployment enables them.
• File or media services if you use features that store uploads with a third-party provider.
• Analytics or error-monitoring tools if configured for your environment, subject to minimisation and contractual safeguards.

We use written agreements or standard terms with processors that require them to protect personal data and process it only on our instructions, except where they are required by law to do otherwise.

6. International transfers

Some subprocessors may process data outside Nigeria. Where that happens, we take steps consistent with Nigerian data protection law (for example, appropriate safeguards such as contractual clauses or reliance on adequacy or permitted mechanisms as applicable). You may contact us for more information about such transfers relevant to the Service.

7. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting, and dispute-resolution needs. Schools may be able to delete or export certain data through the Service; retention of school-held records may also be governed by the school’s own policies and law. When data is no longer required, we delete or anonymise it in line with our internal schedules, subject to backup and technical limitations.

8. Security

We implement appropriate technical and organisational measures designed to protect personal data, including encryption in transit (HTTPS), access controls, authentication mechanisms, and monitoring. No method of transmission or storage is completely secure; we encourage strong passwords and safe sharing of access credentials.

9. Your rights

Subject to Nigerian data protection law, you may have the right to:

• request access to personal data we hold about you;
• request correction of inaccurate data;
• request deletion or restriction in certain circumstances;
• object to processing based on legitimate interests, where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Nigeria Data Protection Commission (NDPC) or other competent authority.

To exercise rights against your school (for example, student or parent records), contact the school directly; they are often the primary controller for that data. To exercise rights against SchoolHubNG as platform operator, email support@schoolhubng.com.ng. We may need to verify your identity before responding.

10. Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy. Essential cookies are needed for security and core functionality (for example, session and sign-in).

11. Children

The Service is intended for use by schools and adults acting on behalf of schools or families. Student profiles are usually created by the school or parent/guardian. If you believe a child’s personal data has been processed improperly, contact the school in the first instance, or contact us and we will assist as appropriate.

12. Changes

We may update this policy from time to time. We will post the revised version on this page and adjust the “Last updated” date. Where changes are material, we will provide additional notice if required by law (for example, by email or an in-product message).

13. Contact

Questions about this Privacy Policy or our data practices: support@schoolhubng.com.ng