Privacy Policy

This Privacy Policy describes how Echo Systems Network Ltd ("Echo Systems", "we", "us", or "our"), the company behind the eSchool platform, collects, uses, stores, and protects personal information in connection with our software services, website (tertiarysystem.com), and all related products.

By using eSchool or our website, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.

1. Who We Are

Echo Systems Network Ltd is a technology company registered in Nigeria, operating as the data controller for all personal data processed through the eSchool platform and tertiarysystem.com website. We are committed to compliance with the Nigeria Data Protection Regulation (NDPR) issued by the National Information Technology Development Agency (NITDA).

2. Information We Collect

We collect information in the following categories:

2.1 Information You Provide Directly

• Contact information (name, email address, phone number, job title)
• Institutional details (institution name, type, student population)
• Demo request and sales enquiry data
• Support ticket information
• Payment and billing information (processed via third-party payment processors)

2.2 Student & Institutional Data (Platform Use)

When your institution deploys eSchool, the platform processes student records, academic data, and financial data on behalf of your institution. In this context, your institution acts as the data controller, and Echo Systems Network Ltd acts as a data processor. We process this data only under your institution's instructions and in accordance with our Data Processing Agreement (DPA).

• Student personal details (name, student ID, date of birth, contact information)
• Academic records (results, GPA, course registrations, carry-over status)
• Financial records (fee payments, receipts, outstanding balances)
• Examination records and attendance

2.3 Automatically Collected Information

• IP address and browser information
• Pages visited and time spent on our website
• Device type and operating system
• Referral source and search terms
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information for the following purposes:

• To provide, operate, and improve the eSchool platform
• To process demo requests and sales enquiries
• To send product updates, maintenance notices, and support communications
• To process payments and manage billing
• To comply with legal obligations and regulatory requirements
• To prevent fraud, abuse, and security threats
• To conduct product analytics and improve user experience
• With your consent — to send marketing communications about eSchool products

We do not sell your personal data to third parties. We do not use student academic data for any purpose other than providing the contracted service to your institution.

4. Data Sharing & Third Parties

We may share data with trusted third parties in limited circumstances:

• Payment processors (e.g., Remita, Paystack) — for transaction processing
• Cloud infrastructure providers — for hosting and data storage (data remains in Nigeria)
• Communication services — for email and SMS delivery
• Legal authorities — when required by Nigerian law or court order

All third-party processors are contractually bound to handle your data securely and only for the stated purpose.

5. Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Role-based access control limiting data access to authorised personnel only
• Regular security audits and penetration testing
• Complete audit logs for all data access and modifications
• Daily encrypted backups with 30-day retention
• Physical security controls at all data centre locations

6. NDPR Compliance

Echo Systems Network Ltd is committed to full compliance with the Nigeria Data Protection Regulation (NDPR 2019) and its implementing guidelines. Our NDPR commitments include:

• Lawful, fair, and transparent processing of personal data
• Collection of data only for specified, legitimate purposes
• Data minimisation — we only collect what is necessary
• Accuracy and currency of personal data
• Storage limitation — data is not retained beyond its useful purpose
• Integrity and confidentiality of all data processed
• Accountability and demonstrability of NDPR compliance

We have designated a Data Protection Officer (DPO) responsible for overseeing NDPR compliance. For NDPR-related queries, contact: dpo@tertiarysystem.com

7. Your Rights

Under NDPR and applicable data protection law, you have the right to:

• Access — Request a copy of personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data (subject to legal obligations)
• Restriction — Request restriction of processing in certain circumstances
• Data Portability — Request your data in a structured, machine-readable format
• Objection — Object to processing of your data for marketing purposes
• Withdraw Consent — Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at: privacy@tertiarysystem.com

8. Cookies

Our website uses cookies to enhance your experience. These include:

• Essential cookies — Required for the website to function (cannot be disabled)
• Analytics cookies — Help us understand how visitors use our website
• Preference cookies — Remember your settings and preferences

You can manage cookie preferences through our cookie banner or your browser settings. Note that disabling certain cookies may affect website functionality.

9. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Institutional platform data — retained for the duration of the licence agreement plus 3 years
• Contact and enquiry data — retained for 2 years from last interaction
• Financial transaction records — retained for 7 years in compliance with Nigerian tax law
• Website analytics data — retained for 26 months

10. Children's Privacy

The eSchool platform is designed for tertiary institutions. We do not knowingly collect personal data from individuals under the age of 16 through our marketing website. If you believe a minor's data has been collected without appropriate consent, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify institutional administrators of significant changes via email. Continued use of eSchool after the effective date of changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related queries, data subject requests, or to report a potential data breach:

• Email: privacy@tertiarysystem.com
• DPO Email: dpo@tertiarysystem.com
• Postal: Echo Systems Network Ltd, Nigeria