1. Legal Entity & Platform Scope
MySchoolReg (“the Platform”, “we”, “us”, or “our”) is an educational enterprise cloud software solution designed, owned, and operated by BUYTRUST NIGERIA LIMITED, a legally incorporated company registered under the laws of the Federal Republic of Nigeria.
This Privacy Policy governs the manner in which Buytrust Nigeria Limited collects, uses, maintains, and discloses information collected from registered educational institutions (“Schools”), school administrators, teachers, students, candidates, and parents/guardians (“Users”).
2. Information We Collect
We only collect data strictly necessary to deliver school administration and academic tracking services:
A. Student & Academic Data
- Full names, gender, date of birth, and class arms.
- Admission numbers and student registration identifiers.
- Exam scores, test results, terminal remarks, and attendance.
- CBT examination responses and biometric/anti-cheat event logs.
B. Guardian & Contact Data
- Guardian names, verified phone numbers, and email addresses.
- Relationship to enrolled ward(s).
- School fee payment transaction histories, reference IDs, and receipts.
C. School & Staff Data
- Institutional name, address, official logo, and principal signatures.
- Staff account usernames, hashed security credentials, and roles.
- Curriculum configurations, subject allocations, and grading schemes.
D. Technical & Security Logs
- IP addresses, browser client fingerprints, and session identifiers.
- Timestamped authentication logs and password update records.
3. WhatsApp Business Messaging & Meta Platform Integration
MySchoolReg integrates with the Meta WhatsApp Cloud API / WhatsApp Business Platform to provide immediate, automated, and secure communications between registered schools and parents/guardians.
Specific Use Cases for WhatsApp Messaging:
Strict No-Spam & Opt-Out Policy:
We strictly forbid the transmission of unsolicited promotional content or third-party marketing messages over WhatsApp. WhatsApp messages are exclusively transactional. Guardians may opt out or modify messaging channels at any time by contacting their school administrator or emailing privacy@myschoolreg.com.
4. Online Payments & Financial Data Security
All online fee transactions initiated on MySchoolReg are securely processed through Paystack Payments Limited, a PCI-DSS Level 1 certified payment gateway licensed by the Central Bank of Nigeria (CBN).
We do NOT store or process raw debit/credit card numbers, CVVs, or bank PINs on our servers. We only receive encrypted transaction tokens, payment reference codes, transaction timestamps, and payment verification statuses necessary to generate verifiable digital receipts.
5. Data Security, Storage & Compliance (NDPA 2023)
Buytrust Nigeria Limited is committed to adhering to the Nigeria Data Protection Act (NDPA) 2023 and international industry best practices:
- Encryption: All data transmitted between clients and our platform is encrypted via TLS 1.3/HTTPS. Sensitive database fields and passwords are cryptographically hashed using salted bcrypt.
- Access Controls: Role-based access controls (RBAC) restrict staff and administrators to only their authorized school domain and designated sectional classes.
- Data Retention: Academic records are maintained for the duration of the school’s active subscription and archived according to national statutory educational record-keeping requirements.
- Non-Disclosure: We never sell, rent, or trade student, parent, or school personal data to third parties or advertising networks.
6. Contact Us & Data Protection Inquiries
For questions regarding this Privacy Policy, data subject access requests, or WhatsApp messaging preferences, please contact our Data Protection Officer: