Privacy & Data Protection Policy

1. Introduction & Scope

Potasfield Schools (“the School”, “we”, “us”, or “our”), located at Plot B, 52 Road, Off 23rd Junction, Festac Town, Lagos, Nigeria, is committed to safeguarding the privacy, dignity, and rights of our students, parents, guardians, alumni, and staff. This Privacy Policy outlines our procedures for collecting, processing, storing, and protecting personal data in full compliance with the Nigeria Data Protection Act (NDPA 2023) and applicable international child privacy standards.

2. Information We Collect

To fulfill our academic, pastoral, boarding, and administrative responsibilities, we collect the following categories of data:

• Student Identification Data: Full name, date of birth, gender, passport photograph, birth certificate details, and National Identification Number (NIN).
• Parent / Guardian Information: Full names, residential and postal addresses, telephone numbers, email addresses, and emergency contact details.
• Academic Records: Entrance examination scores, continuous assessments, report sheets, attendance, and external examination (WAEC/NECO) registrations.
• Medical & Welfare Records: Certified medical fitness reports, allergies, immunization records, dietary restrictions, and clinic visitation logs for day and boarding students.
• Digital & Portal Usage: Login credentials, timestamps, and activity logs on the MYPFS portal and our official website.

3. Purpose & Legal Basis of Processing

We process personal data based on the following legal grounds under the NDPA:

• Contractual Necessity: To deliver primary, secondary, and boarding educational services as contracted by parents upon enrollment.
• Vital Interests: To administer emergency healthcare, first aid, or safety measures in the best interest of students.
• Legal & Regulatory Obligations: Submitting statutory educational returns to the Lagos State Ministry of Basic and Secondary Education, WAEC, and NECO.
• Legitimate Consent: Parental consent for school media, newsletters, and publication of academic honors or extracurricular highlights.

4. Photography & Media Consent

The school respects child protection and dignity. Photographs or video recordings of students engaged in school activities, prize-giving days, or sports competitions are only published on official channels (website, school yearbooks, newsletters) with documented parental or guardian consent obtained during registration. Parents retain the right to withdraw photo consent at any time by writing to admin@potasfieldschools.com.

5. Data Security & Retention

We enforce administrative, technical, and physical safeguards to prevent unauthorized access, accidental loss, or alteration of confidential data. Digital records are stored in encrypted cloud environments with role-based access control (RBAC). Physical files are secured in locked archives accessible only to authorized registry officers.

Student academic transcripts and certificates are retained permanently in line with national educational archive requirements, while temporary continuous assessment drafts are retired periodically according to policy.

6. Your Data Rights

Under the NDPA 2023, parents and data subjects have the right to:

• Request access to copies of personal data held about them or their wards.
• Request rectification of inaccurate or outdated information.
• Object to processing or withdraw voluntary consent without affecting academic standing.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

7. Contact Our Data Protection Officer (DPO)

For questions, access requests, or privacy concerns, please contact: