Privacy Policy
Terma handles personal data of children and adults. This policy explains what we collect and how we protect it, in line with the Nigeria Data Protection Act (NDPA) 2023.
Last updated: June 2026 · Terma Technologies Limited
1. Data we process
Student records (admission no, attendance, results), guardian contacts, staff details, and — for drivers only — live GPS during active trips. Driver location is ephemeral (latest position only) and never stored as history.
2. Lawful basis
We process data on behalf of schools (the data controllers) to deliver the service, and where required to comply with legal obligations. Terma is the data processor.
3. Children’s data
Children’s data is handled with heightened care. Access is strictly scoped: a parent sees only their own child; a teacher only their class/subjects; released results only after the school publishes them.
4. Security
Row-level isolation per school, encrypted transport, hashed PINs and pickup codes, server-side validation of all sensitive actions. Payment card data is handled by Paystack, not stored by Terma.
5. Your rights (NDPA)
You may request access, correction or deletion of your data through your school. Schools manage data-subject requests; Terma supports them as processor.
6. Retention
Data is retained for the school’s active subscription and statutory periods, then deleted or anonymised.
7. Contact
For data questions, contact your school’s administrator or Terma at privacy@terma.ng.