Aristocrats Jewels Academy

Privacy Policy

Effective date: 20 June 2026 · Last updated: 20 June 2026

This Privacy Policy explains how Aristocrats Jewels Academy (“we”, “us”, “the Academy”) collects, uses, and protects personal data when you use our platform at aristocrats.ng. Because most of our students are children, protecting their data is central to how we operate. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).

1.Who we are

Aristocrats Jewels Academy is the data controller responsible for the personal data described in this policy. If you have any questions or want to exercise your rights, contact our Data Protection contact using the details in section 15.

2.Data we collect

We collect the following categories of personal data.

CategoryExamples
Student informationName, age or date of birth, class or grade, student ID, profile photo (optional)
Parent / guardian informationName, email, phone number, relationship to student
Account & loginUsername, password (stored encrypted), account settings
Academic dataAttendance, quiz and assessment results, progress reports, class participation
Payment dataTransaction records, amounts, dates (card details handled by our payment provider, not stored by us)
Technical dataIP address, device and browser type, log data, usage activity
Video class dataParticipation in live sessions and, where applicable, recordings

3.Children's data

A parent or guardian provides consent when registering or approving a student account. Parents may review their child’s data, ask us to correct it, or withdraw consent and have the account deactivated at any time by contacting us. We keep children’s data to the minimum needed to deliver the academy’s programmes.

4.How we use data

  • To create and manage student, parent, and staff accounts.
  • To deliver classes, quizzes, assessments, and progress tracking.
  • To maintain enrollment and academic records.
  • To process fees and keep payment records.
  • To communicate with parents and students about classes, results, and account matters.
  • To keep the Platform secure, prevent misuse, and improve our service.
  • To meet legal and regulatory obligations.

5.Lawful basis for processing

Under the NDPA, we rely on the following lawful bases:

  • Consent — given by a parent or guardian for processing a child’s data.
  • Contract — to provide the educational services you have signed up for.
  • Legal obligation — where we must keep certain records by law.
  • Legitimate interest — to keep the Platform secure and functioning, balanced against your rights.

6.How we share data

We do not sell personal data. We share it only where necessary, with:

  • Service providers who help us run the Platform, such as cloud hosting (Microsoft Azure), video-class infrastructure, and email services, under contracts that require them to protect the data.
  • Payment providers who process fees securely.
  • Partner schools, where a student is enrolled through a school, limited to that school’s authorised administrators.
  • Authorities, where required by law or to protect the safety of students and staff.

7.Payment data

Fees are processed by third-party payment providers. We receive confirmation of payment and keep transaction records, but full card or bank details are handled directly by the provider and are not stored on our servers. Please review your payment provider’s own privacy terms for how they handle your information.

8.Video classes and recordings

Live video classes may be recorded for educational and quality purposes. Where a session is recorded, participants are informed in advance. Recordings are stored securely, accessed only for legitimate educational reasons, and kept no longer than necessary. Participants must not record or share sessions themselves without our permission.

9.How long we keep data

We keep personal data only for as long as needed for the purposes in this policy. Student and academic records are kept while a student is enrolled and for a reasonable period afterwards, or longer where the law requires. When data is no longer needed, we securely delete or anonymise it.

10.How we protect data

We use appropriate technical and organisational measures to protect personal data, including encrypted passwords, secure hosting, access controls, and regular reviews. While no system is completely secure, we work to protect your data and will notify the relevant authority and affected individuals of a serious breach as required by the NDPA.

11.International transfers

Some of our service providers may store or process data outside Nigeria. Where this happens, we take steps to ensure the data receives a level of protection consistent with the NDPA, including using providers that apply recognised data-protection safeguards.

12.Your rights

Subject to the NDPA, you (or a parent on a child’s behalf) have the right to:

  • Access the personal data we hold.
  • Ask us to correct inaccurate or incomplete data.
  • Ask us to delete data where there is no lawful reason to keep it.
  • Object to or restrict certain processing.
  • Withdraw consent at any time.
  • Request a copy of your data in a portable format.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us using the details below. We will respond within the time required by law.

13.Cookies

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Platform is used. You can control cookies through your browser settings, though some features may not work properly without them.

14.Changes to this policy

We may update this policy from time to time. Where changes are significant, we will notify you through the Platform or by email. The “last updated” date at the top shows when the policy was last revised.

15.Contact us

For privacy questions or to exercise your rights, contact:

Aristocrats Jewels Academy — Data Protection
Email: privacy@aristocrats.ng
Website: aristocrats.ng

You may also contact the Nigeria Data Protection Commission (NDPC) if you believe your data has been mishandled.

Review by a qualified legal practitioner before publication