This policy explains what student and staff data Zodmox Academy processes for your school, why it is used, who may access it and the rights available to schools, administrators, guardians and other data subjects. It covers account profiles, attendance, assessments, results, payments, communications and related school records.
We process personal data for defined school-management purposes and apply the Act's principles of lawfulness, fairness, transparency, purpose limitation and data security.
Where applicable, we continue to follow relevant NDPR guidance alongside the NDPA and current guidance issued by the Nigerian regulator.
Individuals may raise a privacy concern with the school, contact Zodmox, or complain to the Nigeria Data Protection Commission.
Zodmox uses authenticated accounts, role-based permissions and secure connections to limit access to school records. Administrators control account approval and access within their school. Payment credentials and platform secrets are not displayed to ordinary users, and sensitive operations require additional verification.
Access control
Users see only the school and portal functions permitted for their role.
Account protection
Passwords, session checks and reset controls help prevent unauthorised access.
Data continuity
Schools can use available exports and backups to preserve important records.
Security review
Access rules and sensitive workflows are reviewed as the service changes.
Records are kept for as long as needed to provide the service, follow the school's documented instructions and meet applicable legal or academic obligations. When data is no longer required, it may be deleted or anonymised, subject to legitimate retention requirements.
Access and correction
Schools and authorised users can review and correct the records they are permitted to manage. Privacy requests are verified before data is disclosed or changed.
Deletion and retention
Verified deletion requests are assessed against the school's instructions and any legal or academic record-retention obligations.
Export and portability
Schools can use available exports and reports to retain their records or move them to another service.
Restriction and objection
Individuals may ask that particular processing be restricted or may object where applicable under data-protection law.
Security incident communication
If a personal-data incident affects a school, we will investigate, contain it and notify the school and relevant authorities when required by law.
Children's data
Schools and guardians must provide the authority or consent required for processing children's data, and access is limited to authorised roles.
For privacy questions or a verified rights request, write to zodmox@gmail.com with your school name, School ID and the nature of the request. We will verify authority before disclosing or changing personal data. You may also contact the Nigeria Data Protection Commission.