Privacy Policy

Sekrenton Systems ("we", "us") provides Sekrenton, a school management platform that gives schools a website, student records, results and report cards, attendance, fees and online payments, and portals for staff, parents and students.

We follow the Nigeria Data Protection Act 2023 and the rules of the Nigeria Data Protection Commission. For any privacy question or request, email privacy@sekrenton.com.

When a school uses Sekrenton, the school decides what information about its students, parents, guardians and staff is recorded and why. The school is the data controller for that information, and we process it on the school's behalf and only on its instructions.

If you are a parent, student or staff member and have a question about your information held by a school, please contact the school first. We will help the school respond.

We are the data controller for information about school administrators who sign up with us, people who contact us, and visitors to sekrenton.com.

On behalf of schools, this can include:

• Students: names, admission numbers, class, date of birth, gender, photos, guardians, medical notes and allergies, attendance, scores, report cards and comments
• Parents and guardians: names, relationship, phone numbers, email addresses and addresses
• Staff: names, contact details, roles, qualifications and photos
• Fees: invoices, discounts, payments and receipts
• Messages: emails and SMS or WhatsApp messages sent through Sekrenton, and whether they were delivered

For our own customers and visitors, this can include:

• Account details: name, email address, phone number and password (stored only in encrypted form)
• Billing: subscription plan, invoices and payment references (we never see or store full card details)
• Enquiries: what you send us through our contact form, email or WhatsApp
• Technical data: IP address, browser type and activity logs, used for security and to keep the service working

Much of the information in Sekrenton is about children. Schools are responsible for having a lawful basis and, where required, the consent of a parent or guardian before recording a child's information.

Students only see their own records. Parents only see information about their own children. Photos of students and staff are kept in private storage and are only shown to people signed in with permission to see them.

We never sell children's data, never use it for advertising, and never use it to build marketing profiles.

• To provide the service each school has asked for, such as report cards, invoices, receipts and alerts to parents
• To process school fee payments and subscription payments
• To send service emails, SMS and WhatsApp messages that a school has switched on or sent
• To keep accounts and data secure, prevent fraud and misuse, and keep an audit log of important actions
• To provide support and respond to enquiries
• To meet our legal, tax and accounting obligations

We do not use school, student or parent data to advertise to anyone.

We only share information with trusted service providers who help us run Sekrenton, under contracts that require them to protect it:

• Supabase: database and private file storage (London, United Kingdom)
• Our hosting provider: application servers (London, United Kingdom)
• Cloudflare: security, website delivery and backups
• Paystack: school fee and subscription payments
• Termii: SMS and WhatsApp messages
• Resend: email delivery

We may also share information when the law requires it, or to protect the safety of a person. We never sell personal data.

School data is stored in London, United Kingdom. Where information is transferred outside Nigeria, we rely on the protections allowed under the Nigeria Data Protection Act, including the adequate level of protection in the destination and our contracts with service providers.

• Each school's data is kept separate from every other school's
• Passwords are encrypted and never visible to anyone, including us
• Access is limited by role, and every important action is recorded in an audit log
• Student and staff photos and uploaded receipts are kept in private storage
• Connections are encrypted, and the database is backed up every night

If a personal data breach happens that is likely to put people at risk, we will inform the affected schools without delay and the Nigeria Data Protection Commission within 72 hours, as the law requires.

We keep school data for as long as the school uses Sekrenton. Schools can export their students, staff and parents at any time. If a school closes its account, we keep its data for 90 days so it can change its mind or download it, and then delete it, except where we must keep some records longer by law (for example payment and tax records).

Under the Nigeria Data Protection Act, you can ask to:

• See the personal data held about you
• Correct information that is wrong
• Delete information that is no longer needed
• Object to or restrict some uses of your information
• Receive your information in a portable format
• Withdraw consent where we relied on it

For school records, please ask your school, which can make most of these changes directly in Sekrenton. For anything else, email privacy@sekrenton.com. You can also complain to the Nigeria Data Protection Commission.

We only use essential cookies: one keeps you signed in, and your browser remembers the school you last searched for on our sign-in page. We do not use advertising or tracking cookies, so we do not ask you to accept them.

If we make important changes, we will let schools know by email or in Sekrenton before they take effect. The date at the top shows when this policy was last updated.

Sekrenton Systems, Lagos, Nigeria. Email: privacy@sekrenton.com. Phone: +234 800 000 0000.