Privacy Policy

Oshodi Royal Eminent Old Students’ Association (“OREOSA”, “OREOSA92”, the “Association”, “we”, “us”, “our”) Website: https://oreosa92.org

Effective date: 23 August 2026 Last updated: 24 August 2026

1. Introduction

This Privacy Policy explains how the Oshodi Royal Eminent Old Students’ Association collects, uses, stores, shares, and protects the personal data of visitors and members of our website at https://oreosa92.org.

The Association is a registered body (Registration Number 171164, registered on 31 December 2021). Membership is open to those who attended Oshodi Secondary School, Tolu Complex, between 1986 and 1992, or who spent at least one academic year within that period.

We are committed to handling your personal data responsibly and in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and the regulations and guidelines issued by the Nigeria Data Protection Commission (NDPC).

By using this website, registering for a member account, or contacting us, you acknowledge that you have read and understood this Policy.

2. Who is responsible for your data

The Association is the data controller responsible for your personal data.

For any questions about this Policy or how your data is handled, contact:

  • Data protection contact: The Public Relations Officer (PRO)
  • Email: info@oreosa92.org
  • Address: Oshodi Secondary School, Tolu School Complex, Lagos, Nigeria

3. What personal data we collect

Depending on how you interact with the website, we may collect the following:

When you register for a member account:

  • First and last name
  • Username
  • Email address
  • Phone number
  • Password (stored in encrypted form)
  • Any additional profile information you choose to add (such as a profile photo or birthday)
  • Your account approval status (registrations are reviewed and approved by an administrator)

When you use the contact form:

  • First and last name
  • Email address
  • Subject and message content

When you interact with member features:

  • Files or documents you upload to the Resource Centre, which may contain personal data
  • Forum posts and replies you submit, which are visible to other members

Automatically, when you visit the site:

  • IP address, browser type, device and operating system information
  • Pages visited and general usage data
  • Cookies and similar technologies (see Section 6)

We do not routinely collect sensitive personal data (such as health, religious, or biometric information) through this website, and outside of a welfare request you should not submit such information through our forms. The one exception is our members’ welfare scheme, described below.

Welfare requests

The Association operates a members’ welfare scheme, available only to logged-in members. When you submit a welfare request, we collect your name, contact details, the type of support requested, and any note you provide — which you may choose to include personal, health, or financial information relevant to your request. You provide this information voluntarily and with your consent. It is used only to assess and administer your welfare request; it is shared only with the members of the Association responsible for reviewing welfare requests; it is treated in strict confidence; and it is kept only as long as necessary to process and record the outcome of your request. You may withdraw a request, or ask us to delete the information associated with it, at any time (see Section 10).

4. How and why we use your data

We use your personal data for the following purposes:

Purpose Lawful basis under the NDPA
Creating and managing your member account Consent; performance of our relationship with you as a member
Reviewing and approving membership registrations Legitimate interest of the Association in verifying members
Responding to enquiries sent via the contact form Consent; legitimate interest
Sending you Association news, announcements, and event information by email, WhatsApp, SMS, and similar channels Consent; legitimate interest
Operating members-only areas (forums, resource centre, member directory) Consent; legitimate interest
Maintaining the security and integrity of the website Legitimate interest; legal obligation
Keeping records required for the Association’s administration Legitimate interest; legal obligation

Your phone number may be used to contact you through channels such as WhatsApp and SMS in addition to email. We will not use your personal data for purposes materially different from those above without informing you.

5. The members-only area and member visibility

Certain information is visible to other logged-in members of the Association. In the member directory and the upcoming-birthdays display, other members can see your name, username, profile photo (where you have uploaded one), and your upcoming birthday shown as the day and month only. Your age and year of birth are not shown, and your email address and phone number are not displayed to other members.

This member information is not visible to the general public; members-only areas require login.

If you do not wish certain profile details to be visible to other members, contact us using the details in Section 2.

6. Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember your login session, and understand how the site is used. Essential cookies are necessary for the website and login to function.

A cookie-consent tool is presented on your first visit, allowing you to accept or manage non-essential cookies, such as analytics or statistics cookies. Non-essential cookies are only set with your consent. You can also control or delete cookies through your browser settings; disabling essential cookies may affect how the website functions.

7. Who we share your data with

We do not sell your personal data. We share it only as necessary with:

  • Service providers who operate the website on our behalf (“data processors”):
    • Namecheap — website hosting (servers located in the United States)
    • Namecheap Private Email — delivery of account and notification emails
    • Loginizer — website login security and protection against unauthorised access
    • UpdraftPlus — creation of website backups, stored off-site in Google Drive (see below)
    • Google Drive (Google LLC) — off-site storage of website backups
    • CookieAdmin — cookie-consent management
  • Authorities or third parties where required by law, or to protect the rights, safety, or property of the Association or its members.

Storage location. Our website is hosted on servers located in the United States (provided by Namecheap), our email is handled within that same environment, and our website backups are stored in Google Drive. Your personal data is therefore stored and processed outside Nigeria. Where data is processed outside Nigeria, we take reasonable steps to ensure it remains protected to a standard consistent with the requirements of the NDPA.

8. How long we keep your data

We keep personal data only as long as necessary for the purposes described above:

  • Member account data — for as long as you remain a member of the Association. If you ask to close your account, we delete your account data within 90 days, except where we are required to retain certain records.
  • Contact form submissions — retained for 12 months after your enquiry is resolved.
  • Backups — website backups are created on a regular schedule and stored off-site in Google Drive. A limited number of recent backups is retained on a rolling basis; older backups are automatically removed as newer ones are created.

When data is no longer needed, we securely delete or anonymise it. Please note that data may persist in backups until those backups are rotated out in the normal course.

9. How we protect your data

We take reasonable technical and organisational measures to protect your personal data, including secure hosting, restricted administrative access, login-security protection, encryption of passwords, and HTTPS encryption of data in transit. No method of transmission or storage is completely secure, but we work to protect your data and to respond appropriately to any data breach in line with our obligations under the NDPA.

10. Your rights

Under the NDPA, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”), where applicable
  • Restrict or object to our processing of your data
  • Data portability — receive your data in a usable format
  • Withdraw consent at any time, where processing is based on consent
  • Not be subject to a decision based solely on automated processing that significantly affects you
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been breached

To exercise any of these rights, contact us using the details in Section 2. We will respond within the timeframe required by law. You will not have to pay a fee in most cases.

11. Children’s privacy

This website is intended for adult alumni and members of the Association. It is not directed at children, and we do not knowingly collect personal data from children.

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.

13. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top will reflect the most recent version. Significant changes will be communicated to members where appropriate. Continued use of the website after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

If you have questions, concerns, or requests regarding this Policy or your personal data, please contact us:

  • The Public Relations Officer (PRO)
  • Email: info@oreosa92.org
  • Address: Oshodi Secondary School, Tolu School Complex, Lagos, Nigeria

You may also contact the Nigeria Data Protection Commission (NDPC) if you wish to make a complaint.

Powered by CookieAdmin
Scroll to Top