Privacy Policy

Quick School Manager ("QSM", "we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website www.qschoolmanager.com and related services.

This policy has been prepared in compliance with:

• The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
• The Nigeria Data Protection Regulation (NDPR), 2019

1. Information We Collect

We may collect the following categories of information:

• Account Information: name, email address, phone number, school or organization details.
• Student & Staff Data: details uploaded by schools (such as student names, attendance, grades, reports, and parent/guardian contacts).
• Payment Information: billing and subscription details.
• Technical Data: IP address, browser type, device identifiers, and log data.
• Cookies & Tracking Data: used to improve site functionality and user experience.

2. How We Use Your Information

We use your information to:

• Provide and manage our services to schools, teachers, parents, and students.
• Facilitate communication between schools and parents/guardians.
• Process subscriptions and payments.
• Send service updates, notifications, or promotional messages (with consent).
• Monitor and improve system security, reliability, and performance.
• Comply with regulatory, legal, and contractual obligations.

3. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contractual necessity – to deliver school management services.
• Consent – for marketing and optional data processing.
• Legal compliance – to meet statutory obligations.
• Legitimate interests – to improve services and protect data.

Under the NDPR, we process data only:

• With the informed consent of the data subject.
• When necessary for the performance of a contract.
• When required to comply with legal obligations.

4. Data Sharing & Third Parties

We do not sell your personal data. We may share data with:

• Authorized School Administrators – who manage student/staff data.
• Third-party service providers – such as hosting providers, cloud services, and payment processors.
• Regulators or law enforcement – where required by applicable laws.

All third parties are bound by strict confidentiality and data protection obligations.

5. International Data Transfers

If data is transferred outside the UK, EU, or Nigeria, we ensure it is protected by:

• Standard Contractual Clauses (SCCs) or equivalent safeguards (for UK/EU users).
• Adequacy decisions where applicable.
• Compliance with NDPR cross-border data transfer rules for Nigerian users.

6. Data Retention

• Student and staff data is retained only for as long as the school remains subscribed.
• Inactive accounts may be deleted after 6 months.
• Legal and financial records may be stored for the statutory period required by law.

7. Data Security

We adopt technical and organizational measures, including:

• Data encryption (in transit and at rest).
• Access controls and authentication.
• Regular system audits and monitoring.

However, no system is 100% secure, and we encourage users to safeguard their login credentials.

8. Your Rights

Under GDPR (UK/EU), you have the right to:

• Access, correct, or delete your data.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time.
• Lodge a complaint with the ICO (UK Information Commissioner’s Office) or your local data authority.

Under NDPR (Nigeria), you have the right to:

• Be informed of how your data is processed.
• Access and request corrections to your personal data.
• Withdraw consent for processing.
• Request deletion of your data (subject to lawful retention requirements).
• Lodge complaints with the NITDA (National Information Technology Development Agency).

Requests can be made by contacting us at: info {[at]} qschoolmanager {[.com]}

9. Children’s Data

QSM processes children’s data only under the instruction of schools and educational institutions. We act as a Data Processor, while schools remain the Data Controllers responsible for ensuring compliance with parental consent and applicable laws.

10. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze site performance. You may disable cookies in your browser settings, though this may affect functionality.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Effective Date."