Legal
Last updated: April 2025. PerAnkh Limited is committed to protecting personal data in line with Nigerian data protection law.
This policy is prepared in accordance with the Nigerian Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR) 2019, and the implementing framework issued by the Nigeria Data Protection Commission (NDPC). PerAnkh Limited is registered with the NDPC as a Data Controller and Data Processor.
PerAnkh Limited (RC: 8992805) ("PerAnkh", "we", "us", "our") is a company registered in Nigeria. We are the authorised Nigerian licensee for sERP — a school management and administration platform — and we operate the schoolerpnigeria.com website and related services ("the Platform").
Contact: serp@perankh.africa
This Privacy Policy applies to:
It does not govern data that your school (as a data controller) collects from students, parents, and staff within your own sERP deployment. For that data, your school is the data controller and should maintain its own privacy notice. PerAnkh processes that data only as your data processor, under your instructions and pursuant to a Data Processing Agreement (DPA).
We collect standard server access logs (IP address, browser type, pages visited, referrer) for security and analytics purposes. We do not use tracking pixels or third-party advertising cookies.
When you submit an enquiry, we collect: name, email address, phone number, school name, state, and message content. This is used solely to respond to your enquiry.
When you purchase a licence, we collect business contact information (name, role, email, phone, school name, address) and payment/invoice records (no card data — payments processed separately via bank transfer or our payment partners).
Data entered into your school's sERP instance — student records, staff records, academic results, fee records, and HR data — is Customer Data. PerAnkh accesses this data only when required to provide technical support, perform system maintenance, or as required by law. We do not use your Customer Data for our own commercial purposes.
We process personal data under the following lawful bases (NDPA Section 25):
We do not sell your personal data. We may share data with:
All third-party processors are contractually obligated to process data only on our instructions and to maintain appropriate security measures.
Your school's data is hosted in Nigeria by default, using Nigerian data centres, to comply with NDPR and NDPA data localisation principles. We do not transfer Customer Data (student, staff, or financial records) outside Nigeria without your explicit written consent, except as permitted under the NDPA where adequate data protection standards are met at the destination.
Under the NDPA, you have the following rights in relation to your personal data:
To exercise any of these rights, email us at serp@perankh.africa. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
We implement appropriate technical and organisational measures to protect personal data, including:
Despite our measures, no internet-connected system can be guaranteed 100% secure. In the event of a personal data breach that is likely to result in risk to individuals, we will notify you and the NDPC within 72 hours of becoming aware, as required by the NDPA.
This website uses only session cookies necessary for the contact form and navigation to function. We do not use tracking, analytics, or advertising cookies. No cookie consent banner is required for strictly necessary cookies.
sERP is a business-to-business platform sold to and used by schools. The school (as data controller) is responsible for obtaining any parental consent required under Nigerian law for the processing of data relating to students under 13. PerAnkh does not knowingly collect personal data from children directly via this website.
As PerAnkh processes Customer Data on behalf of your school, we can provide a formal Data Processing Agreement (DPA) that sets out our respective obligations under the NDPA. Please contact us at serp@perankh.africa to request a DPA.
We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data practices. We will notify existing customers by email of material changes at least 14 days before they take effect. The "last updated" date at the top of this page will always reflect the most recent version.
For any privacy-related queries, requests, or complaints:
If you are unsatisfied with our response, you may escalate your complaint to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.