Legal

Data Processing Agreement (DPA)

Last updated: July 10, 2026

This Data Processing Agreement ("DPA") describes how eSchool Ghana processes personal information on behalf of schools using the eSchool Ghana platform. It forms part of the Terms of Service between eSchool Ghana and the School and applies whenever the School uses the Service to process personal information.

Purpose of this agreement

This Data Processing Agreement ("DPA") describes how eSchool Ghana processes personal information on behalf of schools using the eSchool Ghana platform.

This agreement forms part of the Terms of Service between eSchool Ghana and the School and applies whenever the School uses the Service to process personal information.

Roles of the parties

The School acts as the Data Controller because it determines the purposes and methods for processing personal information relating to students, parents, guardians, staff, and other individuals.

eSchool Ghana acts as the Data Processor because it processes personal information on behalf of the School to provide the Service.

Scope of processing

eSchool Ghana processes personal information only to provide, maintain, secure, and improve the eSchool Ghana platform according to the School’s instructions and applicable agreements.

  • Providing school management functionality.
  • Storing and organizing school records.
  • Generating reports and documents.
  • Supporting communication features.
  • Providing technical support.
  • Maintaining platform security and reliability.

Types of personal information processed

Depending on the features used by the School, eSchool Ghana may process different categories of personal information.

  • Student identification and admission information.
  • Academic records and assessment information.
  • Attendance records.
  • Fee and payment-related records.
  • Parent and guardian information.
  • Staff and employment-related information.
  • Uploaded documents and files.
  • Communication records.

Categories of data subjects

Personal information processed through the Service may relate to the following individuals:

  • Students.
  • Parents and guardians.
  • Teachers.
  • Administrative staff.
  • School employees.
  • Authorized school users.

Processing instructions

eSchool Ghana shall process personal information only according to the School’s instructions, these agreements, and applicable data protection laws.

The School remains responsible for determining whether its instructions comply with applicable legal requirements.

Confidentiality obligations

eSchool Ghana ensures that persons authorized to process personal information are subject to confidentiality obligations.

Access to personal information is limited to personnel who require access to provide and support the Service.

Security measures

eSchool Ghana implements appropriate technical and organizational measures designed to protect personal information.

  • Secure authentication mechanisms.
  • Role-based access controls.
  • Encrypted communication channels.
  • Monitoring and security logging.
  • Backup procedures.
  • Infrastructure security controls.

Subprocessors and third-party providers

eSchool Ghana may use trusted third-party service providers to support delivery of the Service.

These providers may process personal information only where necessary to provide their services and are expected to maintain appropriate security protections.

  • Cloud infrastructure providers.
  • Payment processors.
  • SMS providers.
  • Email delivery providers.
  • Storage and backup providers.

School responsibilities

The School remains responsible for ensuring that personal information processed through the Service is collected and used lawfully.

  • Obtaining required permissions and consents.
  • Providing appropriate privacy notices to individuals.
  • Maintaining accurate records.
  • Managing user access permissions.
  • Ensuring authorized use of the platform.

Data subject requests

Where individuals request access, correction, deletion, or other rights relating to their personal information, the School is responsible for responding as the Data Controller.

eSchool Ghana will provide reasonable assistance where required to help the School respond to such requests.

Data breach notification

eSchool Ghana will take reasonable steps to identify, investigate, and respond to suspected personal data breaches affecting the Service.

Where required, eSchool Ghana will notify affected Schools without unreasonable delay and provide relevant information to support response activities.

Data retention and deletion

eSchool Ghana retains personal information only for as long as necessary to provide the Service, comply with legal obligations, and maintain business records.

Following termination of the School’s account, data may be exported or deleted according to applicable retention policies.

International processing

The School acknowledges that personal information may be processed or stored using infrastructure located outside Ghana.

eSchool Ghana will take reasonable measures to ensure appropriate safeguards are applied when processing information internationally.

Audits and compliance

The School may request reasonable information about eSchool Ghana’s privacy and security practices to verify compliance with this agreement.

Any audit requests must not interfere with the security, confidentiality, or normal operation of the Service.

Limitation of liability

Each party remains responsible for its own obligations under applicable data protection laws.

eSchool Ghana shall not be responsible for unlawful processing decisions made by the School or inaccurate information provided by the School.

Changes to this agreement

eSchool Ghana may update this Data Processing Agreement where necessary to reflect changes in legal requirements, technology, or service operations.

Material changes will be communicated through appropriate channels.

Governing law

This Data Processing Agreement shall be governed by the laws of the Republic of Ghana.

Any disputes relating to this agreement shall be subject to the jurisdiction of the courts of Ghana.

Contact us

For questions relating to data processing, privacy, or this agreement, contact eSchool Ghana through the official privacy or support channels.

Contact for privacy requests

For privacy-related questions or requests, please contact us at support@eschoolghana.com.