Loading privacy policy
Your privacy is important to us. This Privacy Policy explains how gradely.info, operated by Remit Integrated Services LTD, collects, uses, stores, shares, and protects personal information when schools, administrators, parents, students, and other authorised users access or use our platform.
This Policy is designed to align with the Nigeria Data Protection Act (NDP Act) 2023, the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC), the Cybercrimes (Prohibition, Prevention, etc.) Act 2015, and other applicable Nigerian privacy, cybersecurity, education, and consumer protection laws.
1. Information We Collect
Gradely.info collects only the information reasonably necessary to provide, secure, improve, and administer our school information management services.
- School Information: School name, school ID, admin ID, school email address, phone number, subscription details, account status, and related administrative records.
- Student Information: Student names, admission numbers, class, group/section, attendance records, academic results, assessment records, student awards, and related educational records uploaded or managed by the school.
- Parent/Guardian Information: Parent or guardian names, email addresses, phone numbers, login credentials, and student relationship information where provided by the school.
- Teacher/Admin Information: Names, email addresses, roles, login records, permissions, and activity logs for authorised school users.
- Payment and Subscription Information: Subscription plans, transaction references, customer identifiers, billing status, renewal dates, and payment confirmation data processed through Paystack. Gradely.info does not store full card details.
- Technical and Security Information: IP addresses, browser/device details, login timestamps, authentication tokens, audit logs, error logs, and other security records used to protect the platform.
- Communication Data: Support messages, notification records, announcement delivery logs, and email/SMS delivery status where applicable.
2. How We Use Your Data
We use personal data for the following lawful and legitimate purposes:
- To provide access to the Gradely.info platform.
- To authenticate school administrators, teachers, parents, and students.
- To allow schools to manage students, classes, attendance, announcements, financial records, assignments, and academic results.
- To publish academic results and make them available to authorised parents or students.
- To process school subscriptions, renewals, upgrades, downgrades, and account status changes.
- To send service-related notifications, password reset messages, result publication notices, and support communications.
- To provide customer support and respond to enquiries.
- To monitor, secure, troubleshoot, and improve platform performance.
- To prevent fraud, unauthorised access, abuse, or misuse of the platform.
- To comply with legal, regulatory, audit, tax, security, and record-retention obligations.
3. Lawful Basis for Processing
Under the Nigeria Data Protection Act (NDP Act) 2023, personal data may be processed where there is a valid lawful basis. Depending on the activity, Gradely.info and/or the relevant school may rely on one or more of the following lawful bases:
- Contractual necessity: To provide the platform and related services requested by schools and authorised users.
- Legal obligation: To comply with applicable Nigerian laws, regulatory requirements, audit obligations, and lawful requests.
- Legitimate interest: To secure the platform, prevent fraud, maintain service quality, and support school administration, provided such interests do not override the rights and freedoms of data subjects.
- Consent: Where consent is required, including certain communications, optional features, cookies, or processing involving children where applicable.
- Public or vital interest: Where applicable under Nigerian law and relevant to safety, welfare, or other legally recognised interests.
4. Schools as Data Controllers
Schools using Gradely.info generally determine the purpose and means of processing student, parent, staff, and academic records. For such records, the school acts as the Data Controller, while Gradely.info acts as a Data Processor processing data on the school’s documented instructions.
Each school is responsible for ensuring that it has an appropriate lawful basis for collecting, uploading, using, and sharing personal data through the platform, including obtaining parental or guardian consent where required by law.
5. Gradely.info as Data Processor and Service Provider
Where Gradely.info processes school-controlled data, we agree to:
- Process personal data only for authorised platform purposes and documented school instructions.
- Use appropriate technical and organisational safeguards to protect personal data.
- Restrict access to authorised personnel and service providers who need access to deliver the service.
- Assist schools, where reasonably possible, with data subject requests, breach response, and regulatory enquiries.
- Delete, return, or restrict personal data upon termination or valid request, subject to lawful retention requirements.
- Maintain appropriate records and controls consistent with the NDP Act 2023 and applicable NDPC guidance.
6. Data Security
Gradely.info uses reasonable technical and organisational security measures to protect personal data from unauthorised access, alteration, disclosure, loss, misuse, or destruction.
- Encrypted connections: HTTPS/TLS is used to protect data in transit.
- Password protection: Passwords are hashed and not stored in plain text.
- Access controls: Role-based access and authentication controls restrict access to authorised users.
- Audit logging: Administrative actions, login records, and security events may be logged for compliance and security monitoring.
- Secure payment processing: Card and payment processing is handled by Paystack or other authorised payment processors.
- Backups and monitoring: We may maintain backups, error logs, and monitoring tools to support continuity and security.
Although we take reasonable steps to protect personal data, no internet-based service can guarantee absolute security.
7. Third-Party Services and Sub-Processors
We use trusted third-party service providers to operate and deliver Gradely.info. These providers may process limited personal data only where necessary for their services.
- Paystack: School subscription payments and billing transactions.
- Resend: Email delivery and service notifications.
- Infobip: SMS notifications where enabled.
- Render/AWS or similar infrastructure providers: Cloud hosting, database, storage, and application infrastructure.
All third-party service providers are required to implement appropriate technical and organisational safeguards consistent with the Nigeria Data Protection Act (NDP Act) 2023, the GAID 2025, and applicable NDPC guidance.
8. Subscription and Payment Information
Subscription payments are processed through Paystack or other authorised payment providers. Gradely.info does not store full card details.
We may store subscription plan details, transaction references, customer identifiers, payment status, renewal dates, next billing dates, and related billing information needed to manage school accounts and comply with financial record obligations.
9. Cookies and Tracking Technologies
Gradely.info may use cookies, local storage, authentication tokens, and similar technologies to keep users signed in, secure sessions, remember preferences, improve performance, analyse usage, and protect the platform.
Where cookies or tracking tools require consent under applicable law or NDPC guidance, users will be given appropriate notice and choice. Necessary cookies used for security, authentication, accessibility, and core platform functionality may be used without separate consent where permitted by law.
10. Data Retention
Personal data is retained only for as long as reasonably necessary for the purposes described in this Policy, the school’s active use of the platform, contractual obligations, legal compliance, security, audit, tax, dispute resolution, and backup requirements.
Student and parent records are generally retained while the school remains active on Gradely.info. Schools may request deletion of personal data where applicable under the Nigeria Data Protection Act (NDP Act) 2023, subject to legal, regulatory, security, backup, audit, and record-retention obligations.
Where a school account is terminated, Gradely.info may delete or restrict access to personal data within a reasonable period, except where continued retention is required or permitted by law.
11. Your Rights
Under the Nigeria Data Protection Act (NDP Act) 2023, data subjects have rights over their personal data, subject to lawful limitations. These may include the right to:
- Request access to personal data held about them.
- Request correction or rectification of inaccurate or incomplete information.
- Request deletion or erasure where applicable.
- Withdraw consent where consent is the lawful basis for processing.
- Object to processing in certain circumstances.
- Request restriction of processing where applicable.
- Request data portability where applicable.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Because schools control most student and parent records on Gradely.info, parents, students, staff, and other data subjects may first contact the relevant school for access, correction, or deletion requests. Gradely.info will provide reasonable assistance to the school where required.
12. Children’s Privacy
Gradely.info provides school information management services for schools and authorised parents/guardians. We do not knowingly collect personal data directly from children for independent consumer use.
Where children’s data is processed, it is processed on behalf of the relevant school for educational, administrative, attendance, academic reporting, and related school purposes. Schools are responsible for ensuring that any required parental/guardian consent or other lawful basis exists before uploading or processing children’s data on the platform.
13. Data Breach Notification
If Gradely.info becomes aware of a personal data breach affecting personal data processed through the platform, we will take reasonable steps to investigate, contain, mitigate, and remediate the breach.
Where required by the Nigeria Data Protection Act (NDP Act) 2023 or applicable NDPC guidance, Gradely.info will notify the affected school and/or assist the school in notifying the Nigeria Data Protection Commission (NDPC) and affected data subjects within applicable timelines.
14. International Data Transfers
Gradely.info and its service providers may process, host, or store personal data outside Nigeria where necessary to provide the platform. Where cross-border transfers occur, we take reasonable steps to ensure that such transfers are carried out in accordance with the NDP Act 2023, the GAID 2025, NDPC guidance, and applicable safeguards.
15. Policy Acceptance
By registering a school account, subscribing to a plan, accessing Gradely.info, or continuing to use the platform, users acknowledge that they have read and accepted this Privacy Policy, the Terms of Service, Refund Policy, and, where applicable, the Data Processing Agreement.
Gradely.info may record acceptance timestamps, IP addresses, account identifiers, and policy versions for compliance, audit, and dispute-resolution purposes.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, regulatory, operational, or platform changes. Where changes are material, we may notify users through the platform, email, dashboard notice, or other reasonable means.
Continued use of Gradely.info after an updated Privacy Policy becomes effective means that users accept the updated Policy.
17. Legal Compliance
Gradely.info is designed to operate in accordance with the Nigeria Data Protection Act (NDP Act) 2023, the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC), the Cybercrimes (Prohibition, Prevention, etc.) Act 2015, and other applicable Nigerian privacy, cybersecurity, education, consumer protection, and record-retention laws.
18. Contact Us
If you have any questions regarding this Privacy Policy, your personal data, or your rights under the Nigeria Data Protection Act (NDP Act) 2023, please contact:
Email: support@gradely.info
Phone: +234 806 428 7477
19. Regulatory Authority
If you believe your personal data has been processed in violation of applicable Nigerian data protection laws and your concerns have not been satisfactorily addressed by Gradely.info or the relevant school, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC), the statutory authority responsible for regulating data protection in Nigeria.
← Go Back