Privacy Policy

Privacy Policy

Last Updated: 4th day of February, 2026

This Privacy Policy explains how 4sch Software as a Service Venture ("4sch", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when individuals and institutions access or use the 4sch school management system (the "Service").

This Policy is designed to comply with the Nigeria Data Protection Act, 2023 (NDPA) and is structured to be GDPR-ready for schools and users located outside Nigeria, including in the European Union and other jurisdictions with similar data protection laws.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Scope and Application

This Privacy Policy applies to:

  • Schools and educational institutions subscribing to the Service;

  • School administrators, staff, teachers, and other employees;

  • Students using the Service;

  • Parents and legal guardians whose data is processed through the Service;

  • Visitors to the 4sch website and support channels.

Where 4sch processes personal data on behalf of a School, the School acts as the Data Controller, and 4sch acts as a Data Processor, except where 4sch determines the purpose and means of processing, in which case 4sch acts as a Data Controller.

2. Definitions

  • "Personal Data" means any information relating to an identified or identifiable natural person.

  • "Data Subject" means the individual to whom Personal Data relates.

  • "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.

  • "Controller" and "Processor" have the meanings assigned under the NDPA and GDPR.

3. Categories of Personal Data Collected

Depending on how the Service is used, 4sch may collect and process the following categories of Personal Data:

3.1 School and Administrative Data

  • School name, address, contact details

  • Authorized representative information

  • Billing and subscription details

3.2 Staff Data

  • Full name, contact details, and identifiers

  • Employment records, roles, and permissions

  • Attendance and performance-related data

3.3 Student Data

  • Full name, date of birth, gender, and student identification numbers

  • Class, academic records, assessments, attendance, and reports

  • Login credentials and activity logs

3.4 Parent and Guardian Data

  • Full name and relationship to the student

  • Contact information (phone number, email address)

  • Account access credentials and communication records

3.5 Technical and Usage Data

  • IP address, device information, browser type

  • Log files, timestamps, and system activity

4sch does not intentionally collect special category data (such as health or biometric data) unless explicitly required by the School and permitted by applicable law.

4. Lawful Basis for Processing

4sch processes Personal Data on one or more of the following lawful bases:

  • Contractual necessity: to provide and operate the Service;

  • Legal obligation: to comply with applicable laws and regulations;

  • Legitimate interests: to improve security, performance, and functionality;

  • Consent: where explicitly required, particularly for communications or optional features;

  • Vital interests: to protect the safety and welfare of students where legally permitted.

5. Purposes of Processing

Personal Data is processed for the following purposes:

  • Provision, administration, and support of the Service;

  • Student enrollment, academic management, and reporting;

  • Communication between schools, staff, students, and parents;

  • Billing, payments, and subscription management;

  • System security, fraud prevention, and audit logging;

  • Compliance with legal and regulatory obligations.

6. Data Sharing and Disclosure

4sch does not sell Personal Data.

Personal Data may be shared only:

  • With the subscribing School and its authorized users;

  • With trusted third-party service providers (such as hosting, payment, or communication providers) under strict confidentiality and data protection obligations;

  • Where required by law, court order, or regulatory authority;

  • To protect the rights, safety, or property of 4sch, users, or others.

7. International Data Transfers

Where Personal Data is transferred outside Nigeria, 4sch ensures appropriate safeguards are in place, including:

  • Adequacy decisions or equivalent protections;

  • Contractual data protection clauses;

  • Technical and organizational security measures.

8. Data Retention

Personal Data is retained only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law.

Upon termination of a School’s subscription, data retention and deletion shall be handled in accordance with contractual terms, applicable laws, and reasonable data recovery periods.

9. Data Subject Rights

Subject to applicable law, Data Subjects have the right to:

  • Access their Personal Data;

  • Request correction or rectification;

  • Request deletion or restriction of processing;

  • Object to processing based on legitimate interests;

  • Withdraw consent at any time where consent is the lawful basis;

  • Data portability (where applicable);

  • Lodge a complaint with the relevant data protection authority.

Requests may be made through the School or directly to 4sch where applicable.

10. Security Measures

4sch implements appropriate technical and organizational measures to protect Personal Data, including:

  • Access controls and authentication mechanisms;

  • Data encryption where appropriate;

  • Regular system monitoring and updates;

  • Staff confidentiality obligations.

While reasonable measures are taken, no system is completely secure, and 4sch cannot guarantee absolute security.

11. Children’s Data

The Service is designed for use in educational environments and necessarily processes children’s data under the authority of Schools and parents/guardians.

Schools are responsible for ensuring that appropriate parental or guardian consent is obtained where required by law.

12. Cookies and Tracking Technologies

4sch may use cookies and similar technologies to ensure functionality, enhance user experience, and analyze system performance.

Users may control cookies through browser settings, subject to potential limitations in functionality.

13. Changes to This Privacy Policy

4sch may update this Privacy Policy from time to time. Material changes will be communicated through the Service or website.

Continued use of the Service after updates constitutes acceptance of the revised Policy.

14. Contact Information

For questions, requests, or complaints regarding this Privacy Policy or data protection practices, contact:

4sch Software as a Service Venture
Block 2, Flowell Estate, BHD Judges Quarters,
Emando, Ekpoma, Edo State, Nigeria
Phone: 0805 425 1235
Website: www.4sch.com
Email: [email protected]