This Privacy Policy explains how SLAET collects, uses, stores, shares, and protects personal information when you or your school uses our platform. SLAET is a Nigerian school management software provider, and this policy is written to comply with the Nigeria Data Protection Act 2023 (NDPA) and related Nigerian privacy law.
By using SLAET, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use SLAET.
1. Who we are
SLAET is a school management platform built and operated in Nigeria for Nigerian schools. Throughout this policy, "SLAET," "we," "us," and "our" refer to the SLAET platform and the team operating it. You can contact us at support@getslaet.com for any privacy-related questions, requests, or concerns.
2. What information we collect
SLAET collects information necessary to provide school management services. This includes:
Information you or your school provides directly
- School information: school name, address, contact details, registration documents, staff roster, class and subject structure, academic calendar.
- Staff information: names, contact information, role, salary and payroll data (where the school uses the payroll module), and login credentials.
- Student information: names, dates of birth, class, academic records, attendance records, fee records, and parent or guardian contact details.
- Parent and guardian information: names, phone numbers, email addresses, and relationship to student.
- Payment information: payments made to SLAET for subscriptions are processed through our payment provider, which handles card and account details directly. SLAET does not store full card numbers.
Information collected automatically
- Usage data: pages visited, features used, time spent in the platform, and aggregate behavior patterns.
- Device and connection data: IP address, browser type, operating system, device type, and general location (country or region level).
- Cookies and similar technologies: see our Cookie Policy for details.
3. Data relating to children
SLAET processes personal data of students, many of whom are minors under Nigerian law. We take the protection of this data seriously.
- Student data is entered and managed by the school, which acts as the data controller for student records. SLAET acts as the data processor.
- We do not use student data for marketing, advertising, profiling, or any purpose outside the school's management and operational needs.
- Parents and guardians may request access to, correction of, or deletion of their child's data by contacting the school directly. The school may also contact us at support@getslaet.comon a parent's behalf.
4. How we use your information
We use the information collected for the following purposes:
- To provide, operate, and maintain the SLAET platform and its features.
- To process subscription payments and manage billing.
- To communicate with schools about their accounts, including important service updates, security alerts, and customer support.
- To improve SLAET by analyzing usage patterns and identifying friction points.
- To comply with our legal obligations under Nigerian law.
- To protect the security and integrity of the platform and our users.
We do not sell personal data. We do not rent personal data. We do not share personal data with third parties for their own marketing purposes.
5. How we share information
SLAET shares personal data only in the following circumstances:
- With trusted service providers who help us operate the platform, including hosting and database infrastructure, email delivery, payment processing, and content delivery. Each provider is bound by confidentiality and data protection obligations and processes data only as instructed by us. A current list of our service providers is available on request at support@getslaet.com or in our Data Processing Agreement.
- Within a school's own organization: information entered into SLAET by a school is accessible to authorized staff and parents within that school, according to the role-based permissions the school configures.
- To comply with legal obligations, including response to lawful requests from Nigerian regulators, courts, or law enforcement.
- In connection with a business transfer such as a merger, acquisition, or sale of assets, in which case users will be notified before their data is transferred to a new operator.
6. Where your data is stored
SLAET stores primary school data with a trusted cloud infrastructure provider that operates servers globally. Some of these servers are located outside Nigeria. By using SLAET, you consent to this cross-border transfer, which we carry out in accordance with the NDPA's requirements for international data transfer.
Regardless of where data is stored physically, SLAET remains responsible for protecting it according to Nigerian law and the terms of this Privacy Policy.
7. How long we keep your data
We retain personal data for as long as your school maintains an active account with SLAET, plus a reasonable period after account closure to comply with legal obligations, resolve disputes, and maintain audit trails.
If your school closes its SLAET account, we will delete or anonymize personal data within 90 days of the account closure request, except where longer retention is required by law.
8. How we protect your data
We use industry-standard security measures to protect personal data, including:
- Encryption of data in transit using TLS.
- Encryption of data at rest on our hosting provider's servers.
- Role-based access controls limiting who within a school can see or modify data.
- Regular security reviews and updates to the platform.
- Restricted internal access: SLAET team members access school data only when necessary for support or operations, and only with appropriate authorization.
No system is completely secure. If we become aware of a data breach affecting your school's information, we will notify your school promptly in accordance with NDPA requirements.
9. Your rights under Nigerian law
Under the NDPA, you have the following rights regarding your personal data:
- Right to access: you can request a copy of the personal data we hold about you.
- Right to correction: you can ask us to correct inaccurate personal data.
- Right to deletion: you can request that we delete your personal data, subject to our legal obligations.
- Right to object: you can object to certain types of processing, including processing for direct marketing.
- Right to data portability: you can request that your personal data be provided in a structured, commonly used format.
- Right to withdraw consent: where we rely on your consent, you can withdraw it at any time.
To exercise any of these rights, contact support@getslaet.com. We will respond within 30 days.
10. Marketing communications
With your consent, we may send you marketing communications about SLAET, including newsletter content such as Chalkline. You can unsubscribe from marketing emails at any time using the unsubscribe link in each email, or by contacting support@getslaet.com.
We will continue to send essential service communications (such as security alerts, billing notices, and account updates) even if you unsubscribe from marketing.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. If the changes are significant, we will notify you by email or through a prominent notice on the platform. Your continued use of SLAET after the effective date of any changes constitutes acceptance of the updated policy.
12. Contact us
If you have questions, concerns, or requests about this Privacy Policy or how SLAET handles personal data, contact us at:
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).