Privacy Policy — Algorithmics

This Privacy Policy explains how Shakaaraah Communications ("we", "us", "our"), the operator of the Algorithmics Registration System ("the Platform"), collects, uses, stores, and protects personal data belonging to students, guardians, staff, and other users of the Platform.

We process data in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and its General Application and Implementation Directive (GAID), under the oversight of the Nigeria Data Protection Commission (NDPC).

1. Who We Are

Data Controller: Shakaaraah Communications
Contact for privacy inquiries: [INSERT CONTACT EMAIL] (placeholder — update before going live)

2. What Data We Collect

User type	Data collected
Students	Full name, date of birth, phone number, email, home address, guardian link, enrolled courses, payment history
Guardians	Name, contact number, email, relationship to student, address
Staff	Name, role, date of birth, address, email, login credentials
All users	IP address, browser/device information, login timestamps (for security)

3. How We Use Your Data

To register and manage student, guardian, and staff records
To process course payments securely via our payment processor, Paystack
To send account-related emails (registration confirmation, password resets, payment receipts)
To maintain the security of the Platform (login attempt monitoring, fraud prevention)
To comply with legal and regulatory obligations

4. Payment Data

All course payments are processed in Nigerian Naira (NGN) through Paystack, a licensed Nigerian payment gateway. We do not store your full card number, CVV, or banking PIN on our servers — this data is handled directly by Paystack in line with PCI-DSS standards. We only retain the payment reference, amount, and status for record-keeping.

5. How We Protect Your Data

Passwords are hashed and never stored in plain text
All data in transit is encrypted via HTTPS
Access to student, guardian, and staff records is restricted by role-based permissions
Login sessions expire automatically and can be revoked

6. Children's Data

Because the Platform manages student records, we may process personal data belonging to minors. This data is provided and managed by a parent, guardian, or authorized staff member — not directly by the minor. We rely on the lawful basis of contract and legitimate educational interest for this processing, in line with NDPA requirements for children's data.

7. Your Rights

Under the NDPA, you have the right to:

Request a copy of the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data, subject to legal record-keeping obligations
Withdraw consent where processing is based on consent
Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, contact us at [INSERT CONTACT EMAIL].

8. Data Retention

We retain personal data for as long as the associated account is active, plus a reasonable period afterward to meet legal, accounting, and reporting obligations. Guardian records are automatically deleted once their last linked student is removed from the system.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or by email.