Last updated: [DATE]
This Privacy Policy explains how [Your Company Legal Name] ("Lantern," "we," "us") collects, uses, and protects personal data through the Lantern school management platform (the "Service"), in line with the Nigeria Data Protection Act 2023 ("NDPA") and applicable data protection law.
Account data (name, email, role); student academic records (attendance, results, fees) entered by your School; and technical data (device, browser, log data) needed to operate the Service securely.
Student records may include data belonging to minors. This data is entered and controlled by the School, which acts as data controller; Lantern processes it solely on the School's instructions to provide the Service, and does not use it for advertising or sell it to third parties.
To provide the Service (dashboards, results, attendance, fees, notifications), to maintain security and an audit trail of account activity, and to communicate service-related updates.
We do not sell personal data. Limited data is shared with infrastructure providers (e.g. hosting, database, email delivery) strictly to operate the Service, under confidentiality obligations.
We retain School data for as long as the School's subscription is active, and for [X] days afterward to allow data export, unless a longer period is required by law.
We use industry-standard safeguards — encrypted connections, access controls scoped per school, and an internal audit log of administrative actions — to protect data against unauthorized access.
Subject to applicable law, you may request access to, correction of, or deletion of your personal data by contacting your School's administrator, or us directly at [SUPPORT EMAIL].
We may update this policy from time to time. Material changes will be communicated to School administrators.
Questions or data protection requests can be sent to [SUPPORT EMAIL] / [DPO CONTACT, if applicable].