1. Introduction & Scope
Welcome to LaikiEdu. We are committed to protecting the privacy and personal data of everyone who uses our platform — including school administrators, teachers, students, and parents.
This Privacy Policy explains how Laiki Tech Innovations Ltd("LaikiEdu," "we," "us," or "our") collects, uses, stores, and protects personal data when you use the LaikiEdu school management platform ("Service"). It also explains the rights you have under the Nigerian Data Protection Regulation (NDPR) and how to exercise them.
This Policy applies to all data processed through our platform, including data entered by school administrators, data generated through use of the platform, and data collected through our website at laikiedu.com.
2. Who We Are
Data Controller: For personal data relating to school administrators and users who register on our platform, LaikiEdu acts as the Data Controller.
Data Processor: For personal data relating to students, parents, and other individuals whose information is entered into the platform by a school, LaikiEdu acts as a Data Processor on behalf of the school (the Data Controller). Schools are responsible for obtaining necessary consents and ensuring lawful data processing for their students and staff.
RC Number: 8514497
Sapele Road, Edo State, Nigeria
Email: privacy@laikiedu.com
3. Data We Collect
We collect the following categories of personal data:
3.1 School Registration Data
When a school registers on LaikiEdu, we collect:
- School name, type, and address
- Administrator name, email address, and phone number
- School registration or RC number (where provided)
- Login credentials (passwords are encrypted using bcrypt and never stored in plain text)
3.2 Student & Academic Data
Entered by school administrators as part of using the Service:
- Student full name, date of birth, and admission number
- Class, arm, and academic session information
- Academic results, continuous assessment scores, and exam scores
- Attendance records (where applicable)
- Behavioral and psychomotor assessments
- Parent or guardian contact details (name, email, phone number)
3.3 Platform Usage Data
Automatically collected when you use the platform:
- IP address and browser type
- Pages visited and features used
- Login timestamps and session duration
- Error logs and performance data
4. How We Use Your Data
We use your data strictly to provide and improve the LaikiEdu Service. Specifically:
- Service Delivery: Processing student results, generating report cards, and enabling parent and student portal access
- Account Management: Creating and managing school accounts, user authentication, and access control
- Communication: Sending system notifications, result publication alerts, and important service updates
- Support: Providing customer support and technical assistance
- Security: Detecting and preventing fraud, unauthorized access, and security threats
- Service Improvement: Analyzing aggregated (non-personal) usage data to improve the platform
We do not sell your personal data. We do not use your data for advertising. We do not share student data with any third party for commercial purposes.
5. Legal Basis for Processing (NDPR)
Under the Nigerian Data Protection Regulation (NDPR), we process personal data on the following legal bases:
- Contractual Necessity: Processing school administrator data is necessary to fulfill our contract with your school to provide the LaikiEdu Service
- Legitimate Interests: Processing usage data to maintain security, detect fraud, and improve the platform
- Legal Obligation: Complying with applicable Nigerian laws and regulations
- Consent: For any processing not covered by the above, we will seek your explicit consent
For student data processed by schools using our platform, the legal basis for processing is determined by each school as the Data Controller. Schools are responsible for ensuring they have appropriate legal grounds for processing student and parent data.
6. Data Sharing & Third Parties
We do not sell or rent your personal data to any third party. We may share data only in the following limited circumstances:
- Service Providers: We use trusted third-party providers for cloud infrastructure, email delivery, and payment processing. These providers are contractually bound to process data only on our instructions and in compliance with applicable data protection laws
- Legal Requirements: We may disclose data if required by Nigerian law, a court order, or other legal process
- Business Transfers: If LaikiEdu is acquired or merged, your data may be transferred to the new entity, subject to equivalent data protection obligations
- With Your Consent: Any other sharing will only occur with your explicit, prior consent
Cloud Infrastructure: Encrypted server hosting
Email Service: Nodemailer (SMTP)
Payment Processing: Nigerian payment gateway partners
7. Data Retention
We retain data for as long as your school has an active subscription, plus the following periods:
- Account Data: 90 days after account closure, to allow data export and resolve any outstanding disputes
- Student Academic Records: Retained for the duration of the subscription. Exported to your school upon account closure
- Usage/Audit Logs: Up to 12 months for security and compliance purposes
- Backup Data: Our backup retention cycle is 30 days. Backups are automatically purged after this period
You can request deletion of your data at any time by contacting us. We will action deletion requests within 30 days, except where we are required by law to retain certain records.
8. Data Security
We implement industry-standard technical and organizational measures to protect your data:
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
- Encryption at Rest: Sensitive data including passwords is encrypted at rest
- Password Security: Passwords are hashed using bcrypt — we can never see your actual password
- Access Control: Role-based access ensures each user only sees data they are authorized to see
- Security Monitoring: We monitor our systems continuously for unauthorized access and suspicious activity
- Regular Backups: Data is backed up regularly to prevent loss from technical failures
Despite our best efforts, no system is completely immune to security breaches. In the event of a data breach that affects your personal data, we will notify you and the relevant Nigerian regulatory authorities in accordance with NDPR requirements.
9. Your Rights Under NDPR
Under the Nigerian Data Protection Regulation (NDPR), you have the following rights:
- Right of Access: You can request a copy of the personal data we hold about you
- Right to Correction: You can request correction of inaccurate or incomplete personal data
- Right to Deletion: You can request deletion of your personal data (subject to legal retention obligations)
- Right to Restriction: You can request that we restrict the processing of your data in certain circumstances
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
- Right to Object: You can object to our processing of your data based on legitimate interests
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time
For students and parents: If you are a student or parent seeking to exercise these rights regarding academic records held in LaikiEdu, please contact your school administrator first. LaikiEdu acts as a data processor on behalf of the school.
To exercise your rights, contact our Data Protection Officer at privacy@laikiedu.com. We will respond within 30 days.
10. Children's Privacy
LaikiEdu is a business-to-business (B2B) service provided to schools. We do not directly collect personal information from children. Student data is entered into the platform by school administrators, who are responsible for:
- Obtaining appropriate consent from parents or guardians before inputting student data
- Ensuring students and parents are informed about how their data is used
- Complying with applicable laws regarding the processing of children's personal data in Nigeria
If you are a parent and believe your child's data has been uploaded without appropriate consent, please contact your school administrator, and also notify us at privacy@laikiedu.com.
12. International Data Transfers
LaikiEdu is based in Nigeria, and we primarily store and process data in Nigeria. However, some of our third-party service providers (such as email delivery services) may process data outside Nigeria.
Where data is transferred outside Nigeria, we ensure that appropriate safeguards are in place, including contractual data processing agreements that require equivalent data protection standards to those required by Nigerian law.
We do not transfer student academic records outside of Nigeria without explicit consent from the school institution.
13. Contact & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact our Data Protection Officer:
You also have the right to lodge a complaint with the Nigeria Data Protection Bureau (NDPB) if you believe your data rights have been violated.
This Privacy Policy was last updated on 1 July 2026. We will notify you of material changes by email and by posting a notice on our platform.