Your school information, handled with care

Who is responsible?

Enigreen Nursery & Primary School determines how school records are used and is the data controller for those records. School4Sense supports the school’s administration and learning. Hosting and support providers process data for the services they provide; the school is completing its supplier and contractual assessments.

What information do we use?

Pupil and guardian identity and contact details, admission and class records, attendance and absence reasons, assessments and learning submissions, fees and receipts, transport and collection arrangements, staff employment and payroll records, account and security logs, staff attendance QR identifiers, and school-operations or app feedback shared with authorised school leadership. Health, disability and safeguarding-related information needs additional care and restricted access. Provide only information needed for the school’s stated purpose.

Why do we use it?

To deliver education, safeguard pupils, communicate with authorised guardians, manage staff and school finances, maintain accurate records and protect accounts. The school records and reviews the appropriate lawful basis for each activity. Consent is used for genuinely optional activities where appropriate; it is not a blanket requirement for all school services. The processing register records the school’s basis and additional safeguards for children and sensitive data.

Children, guardians and optional photographs

Parents and guardians may act for a child where they have the appropriate authority. The school checks identity and links accounts to authorised pupils. Optional public photographs or videos require a separate, purpose-specific school decision and recorded permission where consent is the basis. Refusing optional consent does not remove access to essential education services. Withdrawal is reviewed for future use and does not undo lawful past processing.

Who can see it?

Authorised school personnel receive module access appropriate to their work. Parent accounts are restricted to linked pupils. Confidential profile fields have additional access restrictions. Information may be shared with authorised service providers, advisers or authorities where there is an assessed need and lawful basis. It is not made publicly available through the school registers.

Storage, transfers and retention

The app uses hosted infrastructure, including Cloudflare Workers and D1. The school must verify processing and backup locations, contracts, subprocessors and any international-transfer safeguards. These assessments are tracked in the Privacy Centre; this notice does not assert Nigerian-only storage. Records are retained according to school-approved education, employment, finance and safeguarding requirements. Retention rules and legal holds are under review; no automatic deletion period is currently applied.

Your choices and rights

You may request information about use of your data, access, correction, deletion where applicable, restriction, objection, or withdrawal of consent. Rights can be subject to identity checks, guardian authority and applicable retention or legal requirements. Use the signed-in Privacy Centre, or contact School office through the school’s usual office contact channel. A dedicated privacy contact is being confirmed. You may also raise a complaint with the Nigeria Data Protection Commission.

Cookies and security

Essential secure cookies support sign-in and short-lived passkey verification challenges. Browser storage remembers installation and navigation preferences. No advertising or analytics cookies are introduced by this release. Password controls, permissions, session expiry and optional or school-required MFA protect accounts. Optional phone passkeys store a public credential, device label and usage information. Fingerprints and face templates are handled by the device and are not collected by School4Sense. Camera-based QR reading processes frames on the device and sends only the staff card identifier when attendance is recorded. Backup downloads are encrypted using a passphrase you keep separately. No system can guarantee absolute security.

Attendance insights and AI

The current attendance insight feature uses explainable statistical rules. Flags support staff follow-up; they do not automatically determine punishment, admission or another significant decision. Staff review the evidence, and only leadership may confirm truancy. School records are not sent to an external generative-AI service by this feature.

Incidents and updates

Report suspected unauthorised access or disclosure to the school immediately. The school assesses risks, documents containment and decides on notifications to the NDPC and affected individuals when required. Material changes to this notice will be dated and published here.

This notice and the app controls support an ongoing school compliance programme. They are not a certification that every legal or contractual requirement has been completed.