JOSBEN INTERNATIONAL BUSINESS SCHOOL, UYO, NIGERIA
DATA PRIVACY POLICY
Effective Date: 1st August 2026.
Next Review Date: 31st July 2026.
Version: 1.0
- INTRODUCTION
JOSBEN International Business School, Uyo, Nigeria (“JOSBEN International Business School,” “JIBS,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us by our students, prospective students, parents and guardians, staff, faculty, consultants, alumni, applicants, visitors, vendors, partners, and other individuals who interact with the School.
This Data Privacy Policy explains how JOSBEN International Business School collects, uses, stores, discloses, protects, and otherwise processes personal data.
We recognise that privacy is a fundamental right and are committed to processing personal data responsibly and transparently in accordance with the Nigeria Data Protection Act, 2023, applicable regulations, guidelines, and other relevant Nigerian laws.
This Policy is intended to provide clear information about our data-processing practices and the rights available to individuals whose personal data we process.
- ABOUT JOSBEN INTERNATIONAL BUSINESS SCHOOL
JOSBEN International Business School is an educational institution located in Uyo, Akwa Ibom State, Nigeria, providing business education, professional training, executive education, academic programmes, research, consultancy, and related educational services.
In carrying out these activities, the School may collect and process personal information relating to students, applicants, employees, faculty members, parents or guardians, alumni, visitors, service providers, and other individuals.
- SCOPE OF THIS POLICY
This Policy applies to personal data processed by or on behalf of JOSBEN International Business School, including information collected:
- Through our website and online platforms;
- Through admission and application forms;
- During registration and enrolment;
- During academic and professional programmes;
- Through examinations, assessments, and academic administration;
- Through employment and recruitment processes;
- Through events, seminars, conferences, and training programmes;
- Through email, telephone, social media, and other communication channels;
- Through physical visits to our premises;
- Through contracts and engagements with vendors, consultants, and business partners; and
- Through any other lawful interaction with the School.
- Where another privacy notice applies to a particular service, programme, application, or platform, that notice should be read together with this Policy.
- MEANING OF PERSONAL DATA
For purposes of this Policy, “personal data” generally means information relating to an identified or identifiable individual.
Depending on the nature of our relationship with an individual, the personal data we may process can include:
- Full name;
- Date and place of birth;
- Gender;
- Residential and postal address;
- Telephone number;
- Email address;
- Identification information;
- Passport photographs;
- Academic qualifications and educational records;
- Examination and assessment results;
- Admission and enrolment information;
- Employment and professional information;
- Financial and payment information;
- Emergency contact information;
- Parent or guardian information;
- Attendance and participation records;
- Information contained in correspondence with the School;
- Information relating to events and programmes;
- Website and technical information;
- Photographs, audio recordings, and video recordings; and
- Other information reasonably required for legitimate educational, administrative, contractual, regulatory, or operational purposes.
Where necessary and legally permitted, the School may process certain categories of sensitive or otherwise specially protected personal data. Such information will be handled with additional safeguards and only where an appropriate lawful basis exists.
- HOW WE COLLECT PERSONAL DATA
We may obtain personal data directly from individuals or from other lawful sources.
Personal data may be collected when you:
- Apply for admission or employment;
- Enrol in a programme;
- Complete registration forms;
- Attend classes or School events;
- Make enquiries or communicate with us;
- Submit assignments, examinations, or other academic materials;
- Make payments or request financial information;
- Apply for scholarships, sponsorships, or other opportunities;
- Participate in surveys, research, conferences, or training;
- Visit our premises;
- Use our website or online platforms;
- Subscribe to School communications;
- Enter into a contract or other relationship with the School; or
- Otherwise interact with JOSBEN International Business School.
Where appropriate, we may also receive information from parents or guardians, educational institutions, regulatory bodies, professional organisations, employers, service providers, referees, or other lawful third parties.
- PURPOSES FOR PROCESSING PERSONAL DATA
JOSBEN International Business School may process personal data for purposes including:
- Processing admission applications;
- Enrolling and registering students;
- Providing educational and professional training services;
- Managing student records;
- Administering examinations and assessments;
- Monitoring academic progress;
- Issuing certificates, transcripts, and other academic documents;
- Communicating with students, applicants, staff, parents, guardians, and stakeholders;
- Managing staff recruitment and employment;
- Processing salaries, benefits, and other employment-related matters;
- Managing fees, payments, refunds, and financial records;
- Organising events, seminars, workshops, and conferences;
- Providing student and administrative support;
- Conducting research and institutional planning;
- Maintaining institutional records;
- Managing School facilities and security;
- Protecting the safety and security of individuals and property;
- Preventing fraud, abuse, misconduct, and other unlawful activities;
- Complying with legal, regulatory, accounting, and reporting obligations;
- Managing contracts and relationships with suppliers and partners;
- Improving our educational and administrative services;
- Managing our website and information technology systems;
- Sending relevant institutional communications;
- Establishing, exercising, or defending legal claims; and
- Performing other lawful activities connected with the operation and administration of the School.
We will not use personal data for purposes that are incompatible with the purpose for which it was collected unless permitted or required by law.
- LAWFUL BASIS FOR PROCESSING
JOSBEN International Business School will process personal data only where there is a lawful basis for doing so under applicable Nigerian data protection law.
Depending on the circumstances, the lawful basis may include:
- Consent: where an individual has freely and knowingly consented to a specific processing activity;
- Contract: where processing is necessary to enter into or perform a contract or provide requested services;
- Legal obligation: where processing is necessary to comply with an obligation imposed by law;
- Vital interests: where processing is necessary to protect the vital interests of an individual or another person;
- Public interest or official authority: where applicable under Nigerian law; and
- Legitimate interests: where processing is necessary for a legitimate interest of the School or a third party, provided that such interest does not override the fundamental rights and freedoms of the data subject.
Where consent is relied upon, individuals may withdraw consent where applicable. Withdrawal of consent will not affect processing already carried out lawfully before withdrawal.
- PRINCIPLES OF DATA PROCESSING
JOSBEN International Business School is committed to applying the principles of responsible data processing recognised under the Nigeria Data Protection Act.
We will endeavour to ensure that personal data is:
- Processed fairly, lawfully, and transparently;
- Collected for specified, explicit, and legitimate purposes;
- Adequate, relevant, and limited to what is necessary;
- Accurate and, where necessary, kept up to date;
- Retained only for as long as reasonably necessary or legally required;
- Processed in a manner that protects confidentiality, integrity, and security;
- Processed in accordance with applicable data-subject rights; and
- Managed with appropriate accountability and privacy safeguards.
We will promote privacy by design and by default when developing or implementing systems, processes, programmes, and services involving personal data.
- DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
JOSBEN International Business School will not sell personal data to third parties.
However, we may disclose or make personal data available to appropriate third parties where lawful and necessary, including:
- Government agencies and regulatory authorities;
- Educational and professional accreditation bodies;
- Examination and certification organisations;
- Banks and payment service providers;
- Information technology and software service providers;
- Professional advisers, auditors, lawyers, and consultants;
- Security and facilities-management providers;
- Contractors and service providers;
- Partner institutions and organisations;
- Parents or guardians, where legally appropriate;
- Employers or sponsors where necessary and authorised;
- Courts, law-enforcement agencies, or other authorities where legally required; and
- Other persons where the individual has provided appropriate consent or where disclosure is otherwise lawful.
Third-party service providers processing personal data on behalf of the School will be expected to implement appropriate confidentiality, security, and data protection safeguards.
- INTERNATIONAL TRANSFER OF PERSONAL DATA
Where personal data is transferred outside Nigeria, JOSBEN International Business School will take appropriate steps to ensure that the transfer is carried out in accordance with applicable Nigerian data protection requirements.
This may include assessing the recipient, the destination country, applicable safeguards, contractual protections, and the lawful basis for the transfer.
- DATA SECURITY
JOSBEN International Business School is committed to protecting personal data against unauthorised access, accidental loss, destruction, alteration, disclosure, or other unlawful processing.
Depending on the circumstances, security measures may include:
- Access controls and user authentication;
- Password and account security;
- Encryption and secure transmission where appropriate;
- Physical security controls;
- Confidentiality obligations for staff and contractors;
- Staff privacy and data-protection training;
- Secure backup and recovery procedures;
- System monitoring and maintenance;
- Malware and cybersecurity protections;
- Appropriate data-retention and disposal procedures; and
- Incident and personal-data-breach management procedures.
No electronic or physical security system can guarantee absolute security. Nevertheless, the School will continually assess and improve its technical and organisational measures.
- PERSONAL DATA BREACHES
A personal-data breach may include accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access to personal data.
Where a breach occurs, JOSBEN International Business School will assess the incident and take appropriate measures to contain, investigate, mitigate, document, and remediate the breach.
Where required by applicable law, the School will notify the relevant regulatory authority and affected data subjects within the applicable statutory or regulatory timeframe.
- DATA RETENTION
JOSBEN International Business School will retain personal data only for as long as reasonably necessary for the purpose for which it was collected or as required by law, regulation, contractual obligations, institutional requirements, or legitimate record-keeping needs.
Different categories of personal data may therefore be retained for different periods.
When personal data is no longer required, the School will take reasonable steps to securely delete, destroy, anonymise, or otherwise dispose of it.
- DATA SUBJECT RIGHTS
Subject to applicable legal limitations and conditions, individuals whose personal data is processed by the School may have rights including:
- The right to be informed about the processing of their personal data;
- The right to request access to personal data held about them;
- The right to request correction or rectification of inaccurate or incomplete personal data;
- The right to request deletion of personal data in appropriate circumstances;
- The right to request restriction of processing in applicable circumstances;
- The right to object to certain processing activities;
- The right to withdraw consent where consent is the lawful basis;
- The right to data portability where applicable;
- Rights relating to automated decision-making and profiling where applicable; and
- The right to lodge a complaint with the appropriate data protection authority where an individual believes their rights have been infringed.
These rights are not absolute and may be subject to statutory or other lawful limitations.
- HOW TO EXERCISE YOUR DATA PROTECTION RIGHTS
Individuals wishing to exercise their data protection rights may submit a written request to:
- Data Protection Officer
- JOSBEN International Business School
- Uyo, Akwa Ibom State, Nigeria
- Email: [Insert Privacy/DPO Email]
- Telephone: [Insert Telephone Number]
A request should, where reasonably possible, include:
- The name of the person making the request;
- Sufficient information to identify the relevant personal data;
- The nature of the request; and
- Any information reasonably required to verify the identity of the requester.
The School may take reasonable steps to verify the identity of a requester before responding to a request.
We will respond to valid requests within the timeframe required by applicable law.
- CHILDREN AND STUDENTS UNDER THE AGE OF 18
JOSBEN International Business School recognises the importance of protecting children’s personal data.
Where we process the personal data of children or persons who may require parental or guardian involvement under applicable law, we will apply appropriate safeguards and, where required, obtain consent or authorisation from a parent or legally recognised guardian.
The School will take reasonable steps to ensure that children’s personal data is not processed in a manner that is unfair, unlawful, excessive, or inconsistent with the purpose for which it was collected.
- PHOTOGRAPHS, VIDEO AND AUDIO RECORDINGS
JOSBEN International Business School may take photographs, video recordings, or audio recordings during School activities, events, lectures, conferences, ceremonies, and other institutional activities.
Such recordings may be used for legitimate institutional purposes, including:
- Security and safety;
- Event documentation;
- Institutional records;
- Educational purposes;
- Internal communications;
- Public relations;
- Promotional and marketing activities; and
- Publication on approved School communication channels.
Where consent is required, the School will obtain appropriate consent before using recordings for the relevant purpose.
Individuals who have concerns about the use of their image, voice, or likeness may contact the Data Protection Officer.
- COOKIES AND WEBSITE TECHNOLOGIES
Our website may use cookies and similar technologies to provide functionality, improve user experience, understand website usage, maintain security, and support legitimate institutional activities.
Where applicable, users will be provided with information about cookies and appropriate choices regarding their use.
Users may also be able to manage certain cookie preferences through their browser settings or the cookie-management tools provided on the School’s website.
- DIRECT MARKETING AND COMMUNICATIONS
JOSBEN International Business School may communicate with individuals about programmes, events, admissions, training opportunities, institutional news, and other relevant activities.
Where consent is required for direct marketing, we will obtain the appropriate consent.
Individuals may request that their personal data not be used for direct marketing purposes or may opt out of marketing communications where applicable.
- THIRD-PARTY WEBSITES AND SERVICES
Our website, communications, or digital platforms may contain links to websites, applications, or services operated by third parties.
JOSBEN International Business School is not responsible for the privacy practices or content of independent third-party websites.
Individuals should review the privacy policies of third-party websites before providing personal information to them.
- DATA ACCURACY
We endeavour to maintain accurate and reliable personal data.
Individuals are encouraged to notify the School promptly where their personal information changes or where they believe information held about them is inaccurate or incomplete.
The School may periodically request individuals to update or confirm their information.
- CONFIDENTIALITY
Personal data obtained by JOSBEN International Business School will be treated as confidential and accessed only by authorised persons who have a legitimate need to access the information.
Staff, faculty members, contractors, consultants, and other persons authorised to process personal data may be required to observe confidentiality and data protection obligations.
- DATA PROTECTION OFFICER
JOSBEN International Business School will designate an appropriate person or function to coordinate data protection and privacy matters within the institution, where required by applicable law.
The Data Protection Officer or designated privacy contact will be responsible for functions that may include:
- Advising the School on data protection obligations;
- Supporting privacy compliance;
- Receiving and coordinating data-subject requests;
- Supporting personal-data-breach management;
- Promoting staff awareness and training;
- Liaising with relevant regulatory authorities where appropriate; and
- Monitoring the implementation of this Policy.
Data Protection Officer: Barr Idongesit Marcus
Email: admin@josbenibs.com
Telephone: +2347045700598,
WhatsApp: +447305699606.
- ACCOUNTABILITY AND COMPLIANCE
JOSBEN International Business School is committed to demonstrating accountability in its processing of personal data.
The School may implement appropriate measures such as:
- Data protection policies and procedures;
- Data-processing inventories and records;
- Privacy impact assessments where appropriate;
- Staff awareness and training;
- Data-processing agreements with relevant service providers;
- Security assessments;
- Internal monitoring and audits;
- Data retention schedules;
- Breach-response procedures; and
- Periodic reviews of privacy and security controls.
The School will cooperate with the Nigeria Data Protection Commission (NDPC) and other competent authorities as required by law.
- CHANGES TO THIS POLICY
JOSBEN International Business School may amend or update this Data Privacy Policy from time to time to reflect changes in legislation, regulatory guidance, technology, institutional practices, or services.
The updated version will be made available through appropriate School communication channels.
The “Last Updated” date at the beginning of this Policy indicates when the Policy was most recently revised.
- CONTACT US
If you have questions, concerns, complaints, or requests concerning this Data Privacy Policy or the processing of your personal data, please contact:
JOSBEN INTERNATIONAL BUSINESS SCHOOL
15 William Bassey Street
Uyo, Akwa Ibom State, Nigeria
Email: admin@josbenibs.com
Telephone:
Website: www.josbenibs.com
We encourage individuals to contact the School first so that we can investigate and, where appropriate, resolve privacy concerns.
Individuals may also have the right to contact the Nigeria Data Protection Commission (NDPC) where they believe their data protection rights have not been adequately addressed.
- APPROVAL AND REVIEW
Policy Owner: JOSBEN International Business School
Approved By: Board of Directors.
Approval Date: 1st August 2026.
Effective Date: 1st August 2026.
Next Review Date: 31st July 2027.
Version: 1.0
