NDPR Compliance

Our data protection principles

Data controller information

Categories of personal data processed

Lawful bases for processing

• Contractual necessity - to deliver the subscription service you signed up for
• Legitimate interest - platform security, fraud prevention, and service improvement
• Consent - marketing communications (withdrawable at any time)
• Legal obligation - tax records, regulatory reporting

Cross-border data transfers

We use service providers that may process data outside Nigeria, in the European Union, the United States and, for AI Tutor answers from DeepSeek, China. They are listed in section 5 of our Privacy Policy. Where data leaves Nigeria we rely on each provider's contractual safeguards and send only what the service needs.

Special categories of data

We do not intentionally collect sensitive personal data (health data, biometric data, religious or political views). Where a user voluntarily provides such information (e.g., in a note or support message), it is processed only for the stated purpose and is not shared with third parties.

Children's data

Schoogle serves school students, most of whom are under 18 and therefore children under the NDPA. Learners who sign up themselves give their date of birth; for under-18s we email the parent or guardian they name, and the account cannot be used until that parent approves it. If the parent declines, the account and its data are deleted. Where a school enrols its students, the school holds the parents' consent for those students.

We do not use children's data for advertising, profiling, or any purpose other than delivering the educational service.

Your rights under the NDPR / NDPA

Submit requests to privacy@schoogleng.com. We will respond within 30 days. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

Data breach response

In the event of a personal data breach, we will notify the NDPC within 72 hours of becoming aware of the breach, as required by the NDPA. Affected data subjects will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

NDPR audit

Consulaw Tech Services Ltd (RC 9374036) is registering with the Nigeria Data Protection Commission as a Data Controller and Processor of Major Importance for Schoogle. Once registered, we will file the annual Compliance Audit Return through a licensed Data Protection Compliance Organisation, as the NDPA requires, and carry out data protection impact assessments for any high-risk processing.