Privacy Policy

The Ol3n platform is operated by Obuaba Ltd ("we", "us"), a company registered in Ghana. This policy explains how personal data is handled on the platform.

For the records a school keeps about its students, guardians and staff, the school is the data controller and Obuaba Ltd acts as its data processor. For the marketing website and onboarding enquiries, Obuaba Ltd is the controller.

Through an onboarded school, the platform holds records the school enters, which may include: student names, dates of birth, photographs, class and academic history, attendance, assessment results, fee and payment records, guardian contact details, and staff employment and payroll information.

Through the marketing website we collect the details submitted in the onboarding form (school name, contact name, email, phone, region, approximate size and any message) and standard technical logs.

School records are used only to provide the platform’s functions to that school — for example producing report cards, sending fee reminders, notifying a parent of a gate check-in, or generating financial reports. We do not sell personal data and we do not use one school’s data for the benefit of another.

Onboarding-form details are used only to respond to the enquiry and arrange onboarding.

We use a small number of service providers to run the platform, including: - a cloud hosting provider for servers, storage and backups; - Paystack for card and Mobile Money payment processing; - Arkesel for SMS delivery.

These providers process data only as needed to perform their service. We do not otherwise disclose personal data except where required by law.

School records are retained for as long as the school uses the platform and for a reasonable period afterwards to allow export, subject to backup cycles and any legal retention requirements. Onboarding-enquiry details are kept only as long as needed to follow up.

Each school runs in an isolated environment with its own database — no school can access another’s data. Data is encrypted in transit, backups are encrypted, financial records are tamper-evident, and access within a school is limited by role. We keep the platform patched and monitored.

The platform necessarily holds data about children. That data is entered and controlled by the school under its own legal basis and safeguarding duties. Parents and guardians with questions about their child’s records should contact the school in the first instance; the school can escalate technical questions to us.

Individuals have rights over their personal data under Ghana’s Data Protection Act, including rights of access and correction. Because the school controls its own records, requests should be directed to the school, which we will support as its processor. For data we control (website enquiries), contact us directly.

We may update this policy from time to time; the "last updated" date above shows when. Questions or requests can be sent to Obuaba Ltd at the address on the contact page.