Legal
Your privacy matters to us. This policy explains how we collect, use, and protect your information.
Last updated: April 1, 2026
When you register for Laurel, we collect your name, email address, phone number, school name, and role within the institution. For school administrators, we may also collect school address, registration numbers, and billing information.
Schools may input student information including names, dates of birth, enrollment records, academic grades, attendance records, and other educational data. This data is owned by the school and processed by Laurel on their behalf.
We automatically collect information about how you interact with our platform, including pages visited, features used, time spent, browser type, device information, and IP address.
We use essential cookies to maintain your session and preferences. We also use analytics cookies to understand how our platform is used. You can manage cookie preferences through your browser settings.
We use collected information to: provide, maintain, and improve our services; process transactions and send related information; send technical notices, updates, and support messages; respond to your comments, questions, and requests; monitor and analyze trends, usage, and activities; detect, investigate, and prevent security incidents; and comply with legal obligations.
We do not sell, trade, or rent personal information to third parties. We may share information with: trusted service providers who assist in operating our platform (hosting, analytics, payment processing); law enforcement when required by law or to protect our rights; other parties with your explicit consent. All third-party providers are bound by data processing agreements and are required to protect your data.
We implement industry-standard security measures to protect your data, including: AES-256 encryption for data at rest; TLS 1.3 encryption for data in transit; regular security audits and penetration testing; role-based access controls; automated backup systems; and SOC 2 Type II compliance. While we strive to protect your data, no method of transmission over the Internet is 100% secure.
We retain personal data for as long as your account is active or as needed to provide services. Schools can request data export or deletion at any time. After account termination, we retain data for up to 90 days before permanent deletion, unless longer retention is required by law. Backup copies may persist for up to 180 days.
Depending on your jurisdiction, you may have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to or restrict processing; data portability; withdraw consent at any time. To exercise these rights, contact our Data Protection Officer at privacy@laurel.edu.
Laurel processes student data on behalf of schools. We do not knowingly collect personal information directly from children under 13. Student data is provided by and controlled by the educational institution. Schools are responsible for obtaining any necessary parental consents.
Your data may be processed in countries other than your country of residence. We ensure that appropriate safeguards are in place, including standard contractual clauses and compliance with applicable data protection frameworks such as GDPR and NDPR.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.
If you have any questions about this Privacy Policy or our data practices, please contact us at: privacy@laurel.edu or write to: Laurel Systems, Data Protection Officer, Victoria Island, Lagos, Nigeria.