Data processing agreement
Last updated 17 October 2026
This agreement is part of the terms of service. It sets out how Adalin Technologies (the processor) handles personal data for the school (the controller) under the Nigeria Data Protection Act 2023.
1. Instructions
Adalin Technologies processes the school's personal data only to provide Adalin SchoolHub and on the school's documented instructions, which include the school's use of the app's settings and features.
2. Confidentiality
Only Adalin Technologies staff who need to, and who are bound to confidentiality, can handle the school's data. They can see inside a school only when the school's proprietor grants support access, for a limited time, and every action they take is recorded in the school's activity log.
3. Security
Adalin Technologies keeps appropriate technical and organisational measures in place, including: separation of each school's data enforced by the database, encryption in transit and at rest, role-based access, rate limits, activity logging, regular backups, and testing of these measures.
4. Sub-processors
The school authorises the service providers listed in the privacy notice. Adalin Technologies binds each to data protection terms at least as protective as these, and gives notice in the app before adding a new one, so the school can object.
5. Helping the school
Adalin Technologies helps the school answer requests from people about their data (the app downloads everything held about a student or staff member), carry out impact assessments where needed, and meet its security duties.
6. Breaches
Adalin Technologies tells the school without undue delay, and in any case within 24 hours of becoming aware, of a breach affecting its data, with what is known and what is being done, so the school can meet its 72-hour duty to the regulator.
7. International transfers
Where providers handle data outside Nigeria, transfers rely on the safeguards the NDPA allows, including contractual protections.
8. End of service
When the school's account closes, Adalin Technologies deletes its personal data within 90 days, after the school has had the chance to download it, unless the law requires it to be kept.
9. Audits
Adalin Technologies makes available the information needed to show it meets this agreement, and allows reasonable audits with notice.