Privacy Policy
EduScholar Lottery — how we handle your personal data under the Nigeria Data Protection Act 2023.
EduScholar is committed to protecting your personal data. This policy explains what data we collect, why we collect it, how we use it, and your rights under the Nigeria Data Protection Act 2023.
1. Data We Collect
We collect only data needed to run the lottery and verify eligibility:
From students
- Full name, date of birth, gender
- School/university name, course, level, GPA
- School/university email address
- Academic records: transcripts, admission letters, school ID
- Contact details: phone number, bank account details for payouts
From parents/guardians submitting for under-18 students
- Parent/guardian full name and ID
- Contact details: phone, email
Automatically collected
- Device type, IP address, login timestamps
- Payment confirmation data from payment gateway
- Usage data within the EduScholar app/website for security and fraud prevention
We do not collect sensitive personal data beyond what is required for verification. We do not sell your data.
2. How We Use Your Data
Your data is used solely for:
- Eligibility verification: Confirming you are enrolled in a recognized tertiary institution
- Draw administration: Running the random draw and tracking entries
- Winner notification and payout: Contacting winners and sending funds to verified bank accounts
- Fraud prevention: Detecting duplicate, falsified, or suspicious entries
- Transparency: Publishing winner names, photos, and schools on the public dashboard if selected
- Legal compliance: Responding to lawful requests from Nigerian regulatory authorities
4. Data Storage and Security
- Data is stored on secure, encrypted servers located in Nigeria where feasible.
- Access is restricted to authorized EduScholar staff only.
- Academic documents are deleted 90 days after verification unless required for dispute resolution.
- Payment details are processed by licensed payment gateways and not stored on our servers.
5. Data Retention
- Unsuccessful entries: Data retained for 12 months for audit and dispute purposes, then deleted.
- Winner data: Retained for 5 years for tax, audit, and regulatory compliance.
- You can request earlier deletion if no legal obligation exists.
6. Your Rights Under NDPA 2023
You have the right to:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of data where no legal obligation to retain exists
- Object: Object to processing for purposes other than the lottery operation
- Withdraw consent: For data used based on consent, such as public winner display
To exercise these rights, contact us at info@eduscholarng.com. We will respond within 30 days.
8. Children’s Data
Participants under 18 can only enter through a parent/guardian. We collect parent/guardian consent and verify it before processing the student’s data.
9. Changes to This Policy
We may update this policy to reflect changes in law or our operations. Material changes will be notified via email and in-app notice 7 days before taking effect.
10. Contact Us
For questions, requests, or complaints about your data:
- Email: info@eduscholarng.com
- Data Protection Officer: dpo@eduscholarng.com
If you are unsatisfied with our response, you can lodge a complaint with the Nigeria Data Protection Commission.
By participating in EduScholar Lottery, you agree to the collection and use of your data as described in this policy.