This notice explains how personal data of learners, parents, teachers, school and ministry staff is handled on SEMS, in line with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).
The data controller for this portal is SEMS - Smart Education Management System Nigeria, 38 Cotonou Crescent, Zone 6, Wuse, FCT. Where a state ministry of education or a school uses SEMS to manage its own learners and staff, that ministry or school is the data controller for that information and SEMS acts as its data processor.
Data Protection Officer (DPO): support@sems.ng. You may also contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
| Who | Data | Source |
|---|---|---|
| Learners | Name, date of birth, gender, admission number, class, photo, guardian details, attendance, assessments, results, fees and, where a school enables it, health notes and transport pickup points. | The school, parents/guardians |
| Parents / guardians | Name, phone, email, occupation, address, relationship to the learner, payment records. | The school, the parent |
| Teachers & school staff | Name, contact details, qualifications, roles, attendance, payroll and leave records, login activity. | The school, the staff member |
| Ministry & school administrators | Name, official email, phone, role, actions taken in the system (audit trail). | The ministry / school |
| Website visitors | IP address, device and browser type, pages visited, contact-form and school-claim submissions. | Your device, forms you submit |
Schools decide which optional modules they use; SEMS never requires more data than the module needs.
We do not sell personal data and we do not use it for advertising.
Most learners on SEMS are under 18. Their data is entered by their school with the authority of a parent or guardian, is visible only to that school's authorised staff and the linked parent account, and is never published on a public website without the school confirming guardian consent. Learner accounts cannot be used for marketing, and we apply additional protections (restricted exports, audit logging, no third-party trackers on learner-facing pages).
Data is shared only with: the controller's own authorised staff; the state ministry of education for schools in that state (statutory reporting); service providers who host, back up, email or process payments for SEMS under written data-processing agreements (including Paystack for fees and Resend for email); and public authorities where the law requires. Data is stored on servers in encrypted form with nightly backups, HTTPS on every site, role-based access, separate databases per school and an audit trail of administrative actions. Data may be processed outside Nigeria only with safeguards permitted by the NDPA.
When a school leaves SEMS its data is exported to the school on request and then securely deleted.
Under the NDPA and NDPR you can ask to access, correct, delete or receive a copy of your personal data, restrict or object to processing, withdraw consent, and complain to the NDPC. Requests are free and answered within 30 days. For learners, requests are made by a parent or guardian, and the school that holds the record may need to verify identity before acting.
SEMS sites use strictly necessary cookies for security (session, CSRF protection, language, 2-factor trusted device) and a cookie that remembers you have seen the cookie notice. We do not set advertising cookies. Optional analytics or embedded content (e.g. YouTube videos on a school site) only load with your consent.
We use only strictly necessary cookies to keep this site secure and remember your preferences — no advertising or tracking. See our Privacy Notice.