Back to Home

Privacy Policy

NDPR-2019 & NDPA-2023 COMPLIANT

Effective Date: April 19, 2026

This Privacy Policy describes how Eduflow Synergy Systems ("we", "us", or "the Platform") collects, uses, and protects data in strict compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023.

1. Roles and Responsibilities

Data Controller

The educational institution (School) using EduFlow is the Data Controller. They determine the purpose and means of processing student and staff data.

Data Processor

EduFlow acts as the Data Processor. We process data according to instructions provided by the Controller under a strictly governed Service Level Agreement.

2. Information We Collect

To provide Nigeria's premier elite school operating system, we process:

  • Identity RecordsFull names, DOB, biometric data (where applicable), and government IDs.
  • Academic Integrity DataExam scores, continuous assessments, and behavioral audit logs.
  • Financial Transaction LogsTuition payments, wallet funding, and forensic fee recovery history.
  • Technical MetadataIP addresses, login timestamps, and forensic session tokens.

3. Your NDPR Rights

As a data subject under Nigerian law, you maintain the following rights over your personal data:

Right to Information
Right to Access
Right to Rectification
Right to Erasure
Right to Object
Data Portability

4. Forensic Security

Data is encrypted using AES-256 protocols and stored in isolated VPC environments. Every administrative action on the platform is digitally signed and logged to a tamper-proof forensic audit trail.

Questions or Remediation Requests?

Eduflow Synergy Systems Legal Department

5 Emmanuel Odubele Ave., Ikorodu, Lagos.

support@eduflow.ng