Privacy & Data Protection
This notice explains how Blissful Home Private Schools(“the School”, “we”) collects, uses and protects personal data, and the rights you have under the Nigeria Data Protection Act (NDPA) 2023. We are the data controller for this data.
Our Data Protection Officer
Mojisola Okanlawon oversees data protection at the School. Reach the DPO at proprietor@blissfulhome.sch.ng— mark your message “For the attention of the DPO”.
What we collect
- Students (including children): name, date of birth, sex, admission number, photograph, home address, state of origin, class/department, academic results, attendance, and — where provided for safety — limited health/emergency information. Senior students using exam practice also have a sign-in email and practice activity.
- Parents/guardians: name, relationship to the child, phone, email, and fee/payment records.
- Staff: name, role, contact details and qualifications.
Some of this is sensitive personal data— a child’s state of origin (which can indicate ethnic origin), religious affiliation, and any health/emergency information — which we give extra protection. We collect only what we need for the purposes below.
Why we use it
To admit and teach students; record results and attendance; issue report cards and transcripts; communicate with parents; bill and collect fees; provide exam practice; register candidates with WAEC/NECO/JAMB; keep children safe; and meet our legal obligations. Our lawful bases are performance of our contract with parents, legal obligation, the protection of a child’s vital interests, our legitimate interest in accurate records, and consent where it applies. We do not sell personal data, and we never use children’s data for marketing.
Who we share it with
- Examination bodies — WAEC, NECO, JAMB — to register candidates, at the student’s request.
- Our payment processor, Paystack. We never see or store card numbers, PINs or OTPs.
- Technology providers acting only on our instructions: Supabase (database, sign-in, storage), Google Workspace (email), Vercel (hosting), Cloudflare (security), Resend (emails). For exam-question generation we use OpenRouter — no student personal data is sent to it, only the subject and topic.
- Government or regulators, where the law requires.
Some providers process data on servers outside Nigeria. We use reputable providers with recognised security and data-protection standards, and data is encrypted, so it stays protected to a level consistent with the NDPA.
How we protect it
- Strict database-level access control — each person sees only their own data (a parent only their verified children, a teacher only their classes).
- Encryption in transit and at rest.
- Sign-in by a one-time code to your own email — no shared passwords.
- Audit logging of sensitive actions, least-privilege access, and an independent security test before any real family data is loaded.
How long we keep it
Only as long as needed. Academic records and transcripts are archived long-term so we can serve future transcript requests; fee/financial records are kept for the statutory period; health and operational data are deleted when no longer needed. Our full Data Retention Policy is available on request.
Your rights
Under the NDPA you can:
- be informed about how we use your data;
- access the data we hold about you or your child;
- correct data that is wrong or incomplete;
- ask us to delete data we have no lawful reason to keep;
- restrict or object to certain processing;
- withdraw consent where we relied on it;
- request your data in a portable form where applicable; and
- complain to us or to the regulator.
To exercise any right, contact the DPO above. We respond within the time the NDPA allows and do not charge for a reasonable request. Parents/guardians may exercise these rights on behalf of their children.
Children’s data
Most of our students are children. We collect the minimum needed, restrict who can see it, never use it for marketing, and act only on the instruction of a parent/guardian whose link to the child the School has verified.
Cookies
The portal uses only the cookies strictly necessary to keep you signed in securely. We do not use advertising or tracking cookies. If we ever introduce non-essential cookies, we will ask for your consent first.
Complaints
Please contact our DPO first so we can put things right. You may also complain to the Nigeria Data Protection Commission (NDPC), ndpc.gov.ng.
Blissful Home Private Schools
10 Mosafuneto Area, Oloruntoba Estate, Ilepa, Via Ifo, Lagos–Abeokuta Expressway, Ogun State, Nigeria
info@blissfulhome.sch.ng · 0708 409 9852 · 0813 440 6456 · 0705 968 4105