Privacy Policy

Theotokos College (“the school”, “we”) is a private Catholic secondary school at Baale Atekun, Ilogbo-Eremi, Lagos State, Nigeria. We are responsible for the personal information handled through this website and the student, parent and staff portal.

We handle personal information in line with the Nigeria Data Protection Act 2023. Questions about this policy can be sent to info@theotokoscollege.org.

• Admission applications: the candidate’s name, gender, date of birth and previous school; the parent or guardian’s name, phone number and email; the chosen exam date and centre; payment status and any uploaded payment receipt.
• Student records: name, reg. number, class, date of birth, guardian contact details, scores, results, report-card comments, attendance and fee payments.
• Portal accounts: name, email address, phone number and the students an account is linked to. Passwords are stored only in scrambled (hashed) form by our login provider; we never see them.
• Staff accounts: name, email, phone, role, subject, qualification and teaching assignments.
• Messages from the website: the details you give when you request a prospectus, arrange a visit or contact us.
• Security information: the IP address and time of result checks, fee look-ups, sign-ups and sign-ins, used to stop people guessing codes or passwords.

• To process admission applications, schedule entrance exams and issue photocards.
• To teach and care for students: keeping records, preparing report cards, taking attendance and contacting parents.
• To let students and parents see results, attendance, timetables and fees in the portal.
• To bill and receive school fees and application fees.
• To reply to enquiries and send school notices.
• To keep the website and portal secure.

We use personal information to provide education to enrolled students (our agreement with parents), to meet legal and regulatory duties as a school, for our legitimate interest in running the school safely and well, and, where we ask for it, with your consent. You can withdraw consent at any time by contacting us.

We do not sell personal information or use it for advertising. We share it only with:

• Service providers who run the website for us: Supabase (database, file storage and logins, hosted in the European Union) and Vercel (website hosting).
• Flutterwave, when you pay online. Card and bank details are entered on Flutterwave’s secure page; the school never receives or stores them.
• Examination bodies and authorities such as WAEC, NECO and government agencies, when required for registration or by law.

These providers may process information outside Nigeria. We use reputable providers that protect it with appropriate safeguards.

• A student can see only their own records.
• A parent can see only the children linked to their account. Linking requires the student’s reg. number and the parent phone number on the school’s records.
• Teachers see the students in the classes they teach. The bursar sees fee information. Administrators manage the whole system.
• Results open only after the school publishes them, and with the term’s result code.

Student records are kept while the student is at the school and afterwards for as long as schools are expected to keep academic records. Applications from candidates who do not join are kept for the admission year and a reasonable time after. Website messages and security logs are kept only as long as they are needed. Portal accounts can be deleted on request.

Information is sent over encrypted connections. Access is controlled by role, and the database itself enforces who can read or change each record. Result codes are stored only in a form that cannot be read back. Repeated wrong attempts are blocked. No system is perfectly secure, so please keep your password private and tell us straight away if you think your account has been misused.

You can ask to see the personal information we hold about you or your child, to correct it, to delete it where we no longer need it, or to object to or restrict how we use it. You can also ask for a copy in a portable format. Contact info@theotokoscollege.org or the school office; we may need to confirm your identity first.

If you are unhappy with how we have handled your information, you may complain to the Nigeria Data Protection Commission.

Most of our students are under 18. Students can have their own portal accounts so they can follow their schoolwork; parents can see the same records through the parent portal. We collect only what we need to educate and care for students.

We may update this policy from time to time. The date at the top shows when it last changed. See also our Cookie Policy and Terms of Use.