Loading privacy policy
Your privacy is important to us. This Privacy Policy explains how gradely.info, operated by Remit Integrated Services LTD, collects, uses, stores, shares, and protects personal information when schools, administrators, parents, students, and other authorised users access or use our platform.
This Policy is designed to align with the Nigeria Data Protection Act (NDP Act) 2023, the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC), the Cybercrimes (Prohibition, Prevention, etc.) Act 2015, and other applicable Nigerian privacy, cybersecurity, education, and consumer protection laws.
1. Information We Collect
Gradely.info collects only the information reasonably necessary to provide, secure, improve, and administer our school information management services.
- School Information: School name, school ID, admin ID, school email address, phone number, subscription and free-trial details, account status, and related administrative records.
- Student Information: Student names, admission numbers, class, group/section, attendance records, academic results, assessment records, student awards, optional student passport/profile photographs, and related educational records uploaded or managed by the school.
- Parent/Guardian Information: Parent or guardian names, email addresses, phone numbers, login credentials, and student relationship information where provided by the school.
- Teacher/Admin Information: Names, email addresses, roles, login records, permissions, and activity logs for authorised school users.
- Payment and Subscription Information: Subscription plans, transaction references, customer identifiers, billing status, renewal dates, and payment confirmation data processed through Paystack. Gradely.info does not store full card details.
- Technical and Security Information: IP addresses, browser/device details, login timestamps, authentication tokens, audit logs, error logs, and other security records used to protect the platform.
- Communication Data: Support messages, notification records, announcement delivery logs, and email/SMS delivery status where applicable.
2. How We Use Your Data
We use personal data for the following lawful and legitimate purposes:
- To provide access to the Gradely.info platform.
- To authenticate school administrators, teachers, parents, and students.
- To allow schools to manage students, classes, attendance, announcements, financial records, assignments, and academic results.
- To publish academic results and make them available to authorised parents or students.
- To process school subscriptions, renewals, upgrades, downgrades, and account status changes.
- To send service-related notifications, password reset messages, result publication notices, and support communications.
- To provide customer support and respond to enquiries.
- To monitor, secure, troubleshoot, and improve platform performance.
- To prevent fraud, unauthorised access, abuse, or misuse of the platform.
- To comply with legal, regulatory, audit, tax, security, and record-retention obligations.
3. Lawful Basis for Processing
Under the Nigeria Data Protection Act (NDP Act) 2023, personal data may be processed where there is a valid lawful basis. Depending on the activity, Gradely.info and/or the relevant school may rely on one or more of the following lawful bases:
- Contractual necessity: To provide the platform and related services requested by schools and authorised users.
- Legal obligation: To comply with applicable Nigerian laws, regulatory requirements, audit obligations, and lawful requests.
- Legitimate interest: To secure the platform, prevent fraud, maintain service quality, and support school administration, provided such interests do not override the rights and freedoms of data subjects.
- Consent: Where consent is required, including certain communications, optional features, cookies, or processing involving children where applicable.
- Public or vital interest: Where applicable under Nigerian law and relevant to safety, welfare, or other legally recognised interests.
4. Schools as Data Controllers
Schools using Gradely.info generally determine the purpose and means of processing student, parent, staff, and academic records. For such records, the school acts as the Data Controller, while Gradely.info acts as a Data Processor processing data on the schoolâs documented instructions.
Each school is responsible for ensuring that it has an appropriate lawful basis for collecting, uploading, using, and sharing personal data through the platform, including obtaining parental or guardian consent where required by law.
4.1 Student Passport and Profile Photographs
Schools may optionally upload a student passport or profile photograph when creating or updating a student record on Gradely.info. The photograph is used to help identify the student within the platform and may be displayed as part of the studentâs profile, academic records, or authorised parent and school administrator views.
Student photographs are processed as part of the educational and administrative records managed by the relevant school. Gradely.info does not use student photographs for advertising or marketing purposes and does not sell student photographs to third parties.
School Responsibility for Student Data and Parental/Guardian Consent: The relevant school is responsible for ensuring that it has an appropriate lawful basis, authority, and all required permissions or consents before collecting, uploading, entering, using, or otherwise processing student personal data through Gradely.info. Where the student is a child and parental or guardian consent is required by applicable law, the school is responsible for obtaining and maintaining that consent before the studentâs personal data is submitted to the platform. This responsibility applies to student information generally, including names, contact or identifying information, academic and assessment records, attendance records, awards, class information, and student passport/profile photographs. Gradely.info processes such school-controlled student data on behalf of the relevant school in accordance with the schoolâs authorised use of the platform.
Student photographs are stored as part of the student record and are protected using the access controls and security measures described in this Privacy Policy. Access is limited to authorised users and service providers where necessary to operate the platform.
5. Gradely.info as Data Processor and Service Provider
Where Gradely.info processes school-controlled data, we agree to:
- Process personal data only for authorised platform purposes and documented school instructions.
- Use appropriate technical and organisational safeguards to protect personal data.
- Restrict access to authorised personnel and service providers who need access to deliver the service.
- Assist schools, where reasonably possible, with data subject requests, breach response, and regulatory enquiries.
- Delete, return, or restrict personal data upon termination or valid request, subject to lawful retention requirements.
- Maintain appropriate records and controls consistent with the NDP Act 2023 and applicable NDPC guidance.
6. Data Security
Gradely.info uses reasonable technical and organisational security measures to protect personal data from unauthorised access, alteration, disclosure, loss, misuse, or destruction.
- Encrypted connections: HTTPS/TLS is used to protect data in transit.
- Password protection: Passwords are hashed and not stored in plain text.
- Access controls: Role-based access and authentication controls restrict access to authorised users.
- Audit logging: Administrative actions, login records, and security events may be logged for compliance and security monitoring.
- Secure payment processing: Card and payment processing is handled by Paystack or other authorised payment processors.
- Backups and monitoring: We may maintain backups, error logs, and monitoring tools to support continuity and security.
Although we take reasonable steps to protect personal data, no internet-based service can guarantee absolute security.
7. Third-Party Services and Sub-Processors
We use trusted third-party service providers to operate and deliver Gradely.info. These providers may process limited personal data only where necessary for their services.
- Paystack: School subscription payments and billing transactions.
- Infobip: SMS notifications where enabled, email delivery, and service notifications.
- Cloudinary: Students' optional passport upload.
- Render/AWS or similar infrastructure providers: Cloud hosting, database, storage, and application infrastructure.
All third-party service providers are required to implement appropriate technical and organisational safeguards consistent with the Nigeria Data Protection Act (NDP Act) 2023, the GAID 2025, and applicable NDPC guidance.
8. Subscription and Payment Information
Subscription payments are processed through Paystack or other authorised payment providers. Gradely.info does not store full card details.
We may store subscription and free-trial details, selected plan information, trial start and end dates, transaction references, customer identifiers, payment status, renewal dates, next billing dates, and related billing information needed to manage school accounts and comply with financial record obligations.
9. Cookies and Tracking Technologies
Gradely.info may use cookies, local storage, authentication tokens, and similar technologies to keep users signed in, secure sessions, remember preferences, improve performance, analyse usage, and protect the platform.
Where cookies or tracking tools require consent under applicable law or NDPC guidance, users will be given appropriate notice and choice. Necessary cookies used for security, authentication, accessibility, and core platform functionality may be used without separate consent where permitted by law.
10. Data Retention
Personal data is retained only for as long as reasonably necessary for the purposes described in this Policy, the schoolâs active use of the platform, contractual obligations, legal compliance, security, audit, tax, dispute resolution, and backup requirements.
Student and parent records are generally retained while the school remains active on Gradely.info. Schools may request deletion of personal data where applicable under the Nigeria Data Protection Act (NDP Act) 2023, subject to legal, regulatory, security, backup, audit, and record-retention obligations.
Where a school account is terminated, Gradely.info may delete or restrict access to personal data within a reasonable period, except where continued retention is required or permitted by law.
11. Your Rights
Under the Nigeria Data Protection Act (NDP Act) 2023, data subjects have rights over their personal data, subject to lawful limitations. These may include the right to:
- Request access to personal data held about them.
- Request correction or rectification of inaccurate or incomplete information.
- Request deletion or erasure where applicable.
- Withdraw consent where consent is the lawful basis for processing.
- Object to processing in certain circumstances.
- Request restriction of processing where applicable.
- Request data portability where applicable.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Because schools control most student and parent records on Gradely.info, parents, students, staff, and other data subjects may first contact the relevant school for access, correction, or deletion requests. Gradely.info will provide reasonable assistance to the school where required.
12. Account Deletion
Gradely.info provides users with a dedicated process for requesting the deletion of their account and associated personal data. Where you are eligible to request account deletion, you may submit your request through our Account Deletion page.
When an account deletion request is received, Gradely.info may verify the identity and authority of the person making the request before processing it. This helps prevent unauthorised or fraudulent deletion of accounts and school records.
Account deletion may result in the permanent removal or anonymisation of personal data associated with the account, subject to information that Gradely.info or the relevant school is required or permitted to retain for legal, regulatory, security, financial, audit, dispute-resolution, backup, or record-retention purposes.
Where student, parent, or staff information is controlled by a school, the relevant school may need to authorise or process the deletion request. Gradely.info will provide reasonable assistance where required.
13. Childrenâs Privacy
Gradely.info provides school information management services for schools and authorised parents/guardians. We do not knowingly collect personal data directly from children for independent consumer use.
Where childrenâs data is processed, it is processed on behalf of the relevant school for educational, administrative, attendance, academic reporting, and related school purposes. Schools are responsible for ensuring that any required parental/guardian consent or other lawful basis exists before uploading or processing childrenâs data on the platform.
14. Data Breach Notification
If Gradely.info becomes aware of a personal data breach affecting personal data processed through the platform, we will take reasonable steps to investigate, contain, mitigate, and remediate the breach.
Where required by the Nigeria Data Protection Act (NDP Act) 2023 or applicable NDPC guidance, Gradely.info will notify the affected school and/or assist the school in notifying the Nigeria Data Protection Commission (NDPC) and affected data subjects within applicable timelines.
15. International Data Transfers
Gradely.info and its service providers may process, host, or store personal data outside Nigeria where necessary to provide the platform. Where cross-border transfers occur, we take reasonable steps to ensure that such transfers are carried out in accordance with the NDP Act 2023, the GAID 2025, NDPC guidance, and applicable safeguards.
16. Policy Acceptance
By registering a school account, subscribing to a plan, accessing Gradely.info, or continuing to use the platform, users acknowledge that they have read and accepted this Privacy Policy, the Terms of Service, Refund Policy, and, where applicable, the Data Processing Agreement.
Gradely.info may record acceptance timestamps, IP addresses, account identifiers, and policy versions for compliance, audit, and dispute-resolution purposes.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, regulatory, operational, or platform changes. Where changes are material, we may notify users through the platform, email, dashboard notice, or other reasonable means.
Continued use of Gradely.info after an updated Privacy Policy becomes effective means that users accept the updated Policy.
18. Legal Compliance
Gradely.info is designed to operate in accordance with the Nigeria Data Protection Act (NDP Act) 2023, the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC), the Cybercrimes (Prohibition, Prevention, etc.) Act 2015, and other applicable Nigerian privacy, cybersecurity, education, consumer protection, and record-retention laws.
19. Contact Us
If you have any questions regarding this Privacy Policy, your personal data, or your rights under the Nigeria Data Protection Act (NDP Act) 2023, please contact:
Email: support@gradely.info
Phone: +234 806 428 7477
20. Regulatory Authority
If you believe your personal data has been processed in violation of applicable Nigerian data protection laws and your concerns have not been satisfactorily addressed by Gradely.info or the relevant school, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC), the statutory authority responsible for regulating data protection in Nigeria.
â Go Back