This Privacy Policy (“Policy”) is effective as of [20 November 2025] and applies to [Business of Sports Institute] (“School,” “we,” “us,” or “our”) and our website at [www.bosinstitute.com]. This Policy explains how we collect, use, store, and protect personal data of students, parents/guardians, and website visitors in compliance with the Nigeria Data Protection Regulation (NDPR).
1. Introduction & Scope
We are committed to protecting your privacy and ensuring transparency in how we handle your personal information. This Policy applies to all personal data collected through our website, enrollment forms, academic platforms, and related services. If you are a parent or guardian of a student, you are responsible for ensuring that the student’s data is accurate and that you have authority to provide it.
2. Types of Personal Data We Collect
Student Information
- Full name, date of birth, gender, and nationality.
- Student ID number and enrollment status.
- Contact information (email, phone number, home address).
- Emergency contact details.
Academic Records
- Grades, test scores, and academic performance.
- Attendance records and disciplinary history.
- Course enrollment and completion status.
- Certificates and transcripts.
Parent/Guardian Information
- Full name, contact details (email, phone, address).
- Relationship to student.
- Identification documents (for verification purposes).
Payment Information
- Billing address and payment method details.
- Transaction history and invoices.
- Financial aid or scholarship information.
Website & Technical Data
- IP address, browser type, and device information.
- Pages visited, time spent on site, and clickstream data.
- Cookies and similar tracking technologies (see Section 9).
- Login credentials and account activity logs.
Communication Data
- Messages, inquiries, and feedback submitted through our website or email.
- Records of support requests and resolutions.
3. Legal Basis & Purposes of Data Collection
We collect and process personal data for the following lawful purposes under the NDPR:
- Enrollment & Education: To register students, manage enrollment, deliver educational services, and maintain academic records.
- Communication: To send updates, announcements, academic progress reports, and respond to inquiries from students and parents.
- Payment Processing: To process tuition fees, invoices, and financial transactions securely.
- Compliance & Safety: To comply with legal obligations, maintain school records, and ensure student safety and welfare.
- Service Improvement: To analyze website usage, improve our services, and personalize the user experience.
- Marketing & Outreach: To send promotional materials and updates about school programs (with your consent).
4. How We Collect Your Data
We collect personal data through the following methods:
- Direct submission via enrollment forms, registration pages, and contact forms.
- Automatic collection through cookies, web beacons, and analytics tools.
- Information provided by parents/guardians on behalf of students.
- Third-party sources (e.g., payment processors, educational partners).
- School records and internal systems.
5. Data Security & Protection Measures
We implement industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:
- Encryption: Sensitive data (passwords, payment information) is encrypted using SSL/TLS protocols.
- Access Controls: Only authorized staff members have access to personal data on a need-to-know basis.
- Firewalls & Intrusion Detection: Our systems are protected by firewalls and monitored for suspicious activity.
- Regular Audits: We conduct periodic security assessments and vulnerability testing.
- Staff Training: Our employees receive data protection and privacy training.
- Secure Backups: Data is backed up securely and tested for recovery.
Note: While we take reasonable precautions, no system is completely secure. We cannot guarantee absolute security of your data. In the event of a data breach, we will notify affected individuals and relevant authorities as required by the NDPR.
6. Sharing of Personal Data with Third Parties
We may share personal data with trusted third parties only for legitimate purposes and under strict confidentiality agreements:
- Payment Processors: To process tuition payments and financial transactions.
- Hosting & IT Service Providers: To maintain our website and learning management systems.
- Analytics Providers: To analyze website usage and improve services.
- Educational Partners: To deliver specialized programs or services (with your consent).
- Legal & Regulatory Authorities: When required by law or to protect our legal rights.
- Emergency Services: In case of emergencies affecting student safety.
We do not sell or rent personal data to third parties for marketing purposes without your explicit consent. All third-party service providers are contractually bound to protect your data and use it only for the purposes specified.
7. Your Rights Under the NDPR
You have the following rights regarding your personal data:
Right of Access
You may request a copy of the personal data we hold about you in a structured, commonly used, and machine-readable format.
Right to Correction
You may request that we correct inaccurate or incomplete personal data.
Right to Deletion
You may request deletion of your personal data, subject to legal retention requirements and ongoing educational obligations.
Right to Data Portability
You may request that we transfer your personal data to another organization in a portable format.
Right to Object
You may object to the processing of your data for marketing or profiling purposes.
Right to Withdraw Consent
If we rely on your consent to process data, you may withdraw that consent at any time.
To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within 30 days or as required by the NDPR.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:
-
Student Records: Retained for [Duration, e.g. 7 years] after graduation or withdrawal, as required by educational regulations.
-
Payment Records: Retained for [Duration, e.g. 7 years] for tax and audit purposes.
-
Website Analytics: Retained for [Duration, e.g. 12 months] unless aggregated or anonymised.
- Communication Records: Retained for [Duration, e.g., 3 years] unless required longer for legal compliance.
After the retention period expires, data is securely deleted or anonymized. However, we may retain data longer if required by law or to resolve disputes.
9. Cookies & Tracking Technologies
What Are Cookies?
Cookies are small text files stored on your device that help us recognize you, remember your preferences, and improve your experience on our website.
Types of Cookies We Use
- Essential Cookies: Required for website functionality (login, security, payment processing). These cannot be disabled.
- Performance Cookies: Help us understand how visitors use our site (e.g., Google Analytics). Used to improve performance.
- Preference Cookies: Remember your settings and preferences (e.g., language, theme).
- Marketing Cookies: Used to deliver targeted advertisements and track campaign effectiveness (requires your consent).
Your Cookie Choices
Most browsers allow you to control cookies through settings. You can:
- Accept all cookies.
- Reject non-essential cookies.
- Delete existing cookies.
- Receive a warning before a cookie is stored.
Note: Disabling essential cookies may affect website functionality. For more information on managing cookies, visit [Browser Help Resources].
Third-Party Tracking
We use third-party analytics tools (e.g., Google Analytics) that may set their own cookies. These providers have their own privacy policies. We recommend reviewing their policies for more information.
10. Children’s Privacy
Our services are directed at students of all ages. For students under 18 years old but not less than 16 years , we require parental or guardian consent before collecting personal data. Parents/guardians have the right to:
- Review the personal data we hold about their child.
- Request correction or deletion of the child’s data.
- Withdraw consent for data processing.
We do not knowingly collect data from children without parental consent. If we become aware of unauthorized collection, we will delete such data promptly.
11. Contact Information for Privacy Inquiries
If you have questions, concerns, or wish to exercise your rights under this Privacy Policy or the NDPR, please contact us:
Business of Sports Institute
Email: [businessofsportsafrica@gmail.com]
Phone: [School Phone Number]
Website: www.bosinstitute.com
You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA) or other relevant data protection authorities in Nigeria.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the “Effective Date” at the top. Your continued use of our services after such changes constitutes your acceptance of the updated policy.
13. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Regulation (NDPR). Any disputes arising from this policy shall be subject to the jurisdiction of the courts of Nigeria.
Last Updated: [22 November 2025]
Thank you for trusting Business of Sports Institute Africa with your personal information. We are committed to protecting your privacy and maintaining your confidence.