Privacy Policy

Last updated: September 13, 2026

1. Introduction

Blessed Sacrament Primary School ("we", "our", "us") operates the EduMaster school management system. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect information that you provide directly to us, including:

• Personal Information: Names, email addresses, phone numbers, national identification numbers, and physical addresses of students, parents, and staff.
• Academic Records: Grades, attendance records, report cards, class assignments, and disciplinary records.
• Financial Data: Fee payment records, payment methods, mobile money transaction references, and account balances.
• System Usage Data: Login timestamps, IP addresses, browser information, and activity logs for security purposes.
• Photographs: Student and staff photos used for identification and ID card generation.

3. How We Use Your Information

We use the collected information for the following purposes:

• Managing student enrollment, academic records, and school administration.
• Processing fee payments and generating financial reports.
• Communicating with parents and guardians about student progress.
• Generating report cards, ID cards, and official school documents.
• Ensuring system security through session management and audit trails.
• Complying with educational regulatory requirements.

4. Data Protection & Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted session management with secure cookies and session fingerprinting.
• Role-based access control (RBAC) ensuring users only access authorized data.
• CSRF protection on all forms to prevent cross-site request forgery.
• Regular automated database backups with retention policies.
• Security headers (CSP, X-Frame-Options, HSTS) to protect against common web attacks.
• Password hashing using industry-standard bcrypt algorithms.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

• With authorized school administrators and teachers as required for educational purposes.
• With parents/guardians regarding their children's academic and financial records.
• When required by law or to comply with legal obligations.
• With payment processors (e.g., MTN Mobile Money, Airtel Money) to process fee payments.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy. Academic records are retained in accordance with educational regulations. System logs are automatically purged after 180 days, and expired notifications after 90 days.

7. Your Rights

You have the right to:

• Access your personal data held in the system.
• Request correction of inaccurate information.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent for optional data processing.

8. Children's Privacy

Our system processes data of minors (students) as part of its educational purpose. This data is collected and managed with the consent of parents or legal guardians and is handled with the highest level of care and protection.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes through the system's announcement feature.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact the school administration or email us at support@edumaster.com.