Skip to content
GSMS is onboarding schools for the coming term.Book a demo →
GSMSby Golad

Legal

Data protection

How GSMS protects the data schools trust it with.

Draft — this page is being reviewed by our legal advisers before launch. Golad Technologies Limited.

Controller and processor

Each school is the data controller for its learners', families' and staff's data. Golad Technologies Limited is the processor and acts on the school's instructions. Schools and Golad agree this in a data processing agreement.

Built with the NDPA 2023 in mind

GSMS is designed to help Nigerian schools meet the Nigeria Data Protection Act 2023, including the extra care required for children's data.

How data is protected

  • Each school group's data is separated by row-level security in the database.
  • Access inside a school depends on each person's role and the school, campus or class they work with.
  • Safeguarding notes are encrypted with a key held outside the database, and every read is recorded.
  • Sensitive changes are recorded in an audit trail.
  • Files are kept in private storage and are only reached through GSMS.

Requests about personal data

Requests about a child's or staff member's data go to the school, which decides on them. Golad helps the school respond. To raise a concern with Golad, contact our data protection officer via our contact page.