DRAFT – pending DPO review
This text is a placeholder. It hasn't been approved by the university's Data Protection Officer or legal team and isn't yet the university's policy. Items in [square brackets] are still to be decided.
Privacy Notice
How Redeemer's University collects, uses and protects personal data of applicants, students, staff and visitors who use this portal.
1. Who we are
Redeemer's University is the data controller for personal data processed through this portal. Data Protection Officer: [name, email and postal address to be confirmed].
2. What we collect
- Identity and contact details: name, date of birth, gender, photo, email, phone, address, next of kin.
- Admission records: JAMB details, O'level results, uploaded documents.
- Academic records: registration, attendance, scores, grades, GPA/CGPA, standing.
- Financial records: invoices, payments, waivers.
- Accommodation, clearance and welfare records where you use those services.
- Technical data: sign-in times and the security logs needed to protect your account.
3. Why we use it and on what basis
- To admit you, teach and assess you, and keep your academic record: performing our contract with you.
- To meet legal and regulatory duties, for example reporting to the NUC and submitting graduation lists for NYSC: legal obligation.
- To run the portal securely and prevent fraud: legitimate interests.
- Anything else, for example marketing or research use of your data, only with your consent, which you can withdraw. [Scope to be confirmed.]
5. How long we keep it
Academic records that prove your qualification are kept permanently. Other records are kept only as long as needed: [retention periods for applications, financial records, documents and logs to be set by management].
6. Your rights
You can ask to see the data we hold about you, correct it, object to or restrict some uses, withdraw consent, and ask for a copy in a portable form. Some records can't be deleted while the law or your academic record requires them. Send requests to the Data Protection Officer. [Response time to be confirmed.]
7. How we protect it
Access is limited by role, every change to results and records is logged, and connections are encrypted. [Further measures to be described after the DPO's review.]
8. Complaints
Contact the Data Protection Officer first. You may also complain to the Nigeria Data Protection Commission.