Privacy Policy

1. Who we are

This website is run by Hebron Mega Nursery and Primary School, 2/4 Abiola Street, off Adeyemi Road, Ipaja, Lagos, Nigeria ("the school", "we", "us"). We decide why and how personal information collected through this website is used, and we handle it in line with the Nigeria Data Protection Act 2023.

2. What we collect

We only collect what we need for the purpose below.

If you visit the website

We do not use advertising or analytics trackers. The Contact page shows an embedded Google Map, and Google may set its own cookies when that map loads.

If you contact us or send an admissions enquiry

Your name, email address, the details you type into the form (for example a child's name or the class you are asking about) and your message. This is emailed to the school office so we can reply.

If you subscribe to the newsletter

Your email address, and a record that you agreed to this policy when you subscribed. You can unsubscribe at any time using the link in every newsletter.

If you are a teacher or administrator

Your name, email address, class (teachers), optional phone number and password. Passwords are stored only as scrambled (hashed) values, never as plain text. We also keep an activity record of important actions in the portal (such as signing in, adding a pupil or publishing a test), and a record of which version of this policy you agreed to and when.

If you are a pupil

Your name, the email address your class teacher added for you, and your class. When you use the pupil portal we also store your test answers, assignment submissions, scores and results, and any files you upload.

Work and files in the portals

Teachers and pupils can save class lists, attendance, tests, assignments, results, pictures and documents. These are stored in the school's database so they are available when you sign in again.

3. How we use it

to create and secure portal accounts and let the right people sign in;
to run lessons, tests, assignments and results through the portals;
to reply to enquiries and process admissions requests;
to send the newsletter and school updates to people who asked for them;
to send sign-in and password-reset codes by email;
to keep the website and portals safe, and to fix problems.

We do not sell personal information and we do not use it for advertising.

4. Children's information

Pupils are children, so we take extra care. A pupil's portal account is created only when their class teacher adds the pupil's email address, and it is meant to be used with the knowledge of a parent or guardian. A pupil's information is visible to the school staff responsible for that pupil's class and to the pupil. It is not shown to the public or to other pupils.

Parents and guardians may ask to see, correct or delete their child's information at any time (see "Your rights").

Only the people and services that are needed to run the website:

School staff who need the information to do their work (administrators see accounts, class lists and activity records; teachers see their own class).
Our service providers: the company that hosts the website, the company that hosts the database, and Google (Gmail), which we use to send and receive email. They process information for us and only on our instructions.
Authorities, but only where the law requires it.

6. Cookies and browser storage

Sign-in cookies. When you sign in, a secure cookie keeps you signed in on that device (up to 7 days for administrators, 14 for teachers and 30 for pupils, or until you sign out). The website cannot work for signed-in users without it.
Browser storage. We save your light/dark mode choice, a short copy of who is signed in, and a copy of your class work so pages load quickly. This stays on your device.

7. How long we keep it

We keep information only as long as it is needed for the reasons above. Accounts and class records are kept while the teacher or pupil is part of the school and the account is active. Sign-in and reset codes expire after 10 minutes. A teacher or administrator can delete their own account from their portal, and an administrator can remove teachers and pupils. Newsletter subscribers can unsubscribe at any time, and you can also ask us to delete anything we hold about you.

8. Keeping it safe

Passwords are hashed, sign-in uses secure cookies, repeated wrong attempts are blocked, and pupils sign in with a one-time code sent to their email. No system is perfectly secure, so please use a strong password, keep it private and sign out on shared devices. If you think your account has been misused, tell us straight away.

9. Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

tell you what information we hold about you or your child, and give you a copy;
correct information that is wrong or out of date;
delete information we no longer need;
stop using your information for a particular purpose, such as the newsletter;
withdraw a consent you gave earlier. This does not affect what we did before you withdrew it.

If you are not happy with how we handle your information, please talk to us first. You also have the right to complain to the Nigeria Data Protection Commission.

10. When we ask you to agree

We ask you to agree to this policy at these points:

When you sign in to the pupil, teacher or admin portal for the first time, and again whenever this policy changes in a way that matters.
When you create a teacher or admin account.
When you subscribe to the newsletter.

If you choose not to agree, you will not be able to use the portals and we will not add you to the newsletter. You can still browse the public website.

11. Changes to this policy

If we change this policy we will update the date at the top of this page. If the change is important, people who use the portals will be asked to agree again the next time they sign in.

12. Contact us

For any question about this policy or your information, contact the school office:

Email: hebronmegasch@gmail.com
Phone: +234 803 719 4890
Address: 2/4 Abiola Street, off Adeyemi Road, Ipaja, Lagos, Nigeria