Privacy policy

This policy applies to visitors of the Pensuh website, people who request demonstrations, and administrators who create a sample-data preview workspace. It does not govern production student records, parent accounts, staff records or school pickup information held by a school using the institutional Pensuh application. Those services will require their own privacy and data-processing arrangements before launch.

The organisation responsible for the handling of enquiries through this website is Pensuh. For privacy questions or requests, email [email protected].

Information you provide: Your name, work email, institution name, institution type, job role and country when you request a demo. You may choose to share an approximate number of learners, products of interest and notes about your requirements. For preview accounts, we also collect an administrator name, institution name, role, location, approximate learner count, work email and any optional phone number. We verify the email address and, if a phone number is provided, verify that number by a one-time SMS code before creating a workspace. We temporarily retain encrypted registration-link material and a hash of any SMS verification code; we do not store plaintext passwords in unfinished registrations. After a successful signup, we store a salted password hash and a temporary account session. The sandbox stores only fictional learner records and the sample status changes you make. We also record the page from which you submitted the enquiry and when you gave the form acknowledgement.

Technical information: The website uses request information needed to respond to you and protect the enquiry form against abuse. Rate limiting derives a keyed hash from the connecting IP address; the rate-limit store does not need to retain the raw address for that purpose. Hosting and network providers may separately process technical request logs to operate their services.

Cookies: We save your selected light or dark theme and your cookie preferences in essential cookies. Optional personalization, analytics and advertising cookies are off by default and no optional tracking scripts are currently installed. See our cookie policy for the precise cookie names and lifetimes.

• To respond to your enquiry, understand your institution's needs and arrange a relevant product or requirements conversation.
• To verify a workspace administrator’s email and any optional phone number, provision the workspace and send account-access instructions.
• To send one reminder about an unfinished registration only if you explicitly request that reminder. This is separate from permission for marketing emails.
• To manage follow-up messages about the request you submitted, including keeping a record of the conversation and avoiding duplicate submissions.
• To protect the website and its forms from automated abuse, misuse and security incidents.
• To meet any legal or regulatory obligations that apply to the records we hold.

We rely on your consent to contact you in response to a demo request, and, where applicable, steps you ask us to take before entering a commercial arrangement. We rely on legitimate interests in operating a secure website and handling genuine institutional enquiries, subject to applicable law and your rights. We do not treat a demo enquiry as permission to send unrelated promotional campaigns.

Access to enquiries is intended for authorised Pensuh personnel handling sales, implementation or customer questions. Depending on the deployment configuration, service providers may process information on our behalf for website hosting, PostgreSQL database hosting, email notifications and the security of the enquiry form. When configured, Resend is used to send demo notifications and transactional registration emails. An optional SMS provider receives the telephone number and one-time message only if you provide a phone number during signup.

We do not publish your enquiry on the website or share it with schools, students or other prospective customers. We may disclose information where required by law or to protect legal rights. If a replacement lead-processing backend is connected, we will review and update the relevant disclosures before it receives live data.

The location of processing depends on the hosting, database and email services selected for deployment. Some providers may process information outside Nigeria. Where a cross-border transfer takes place, it must be assessed and managed under applicable data protection requirements, including the Nigeria Data Protection Act, 2023.

The website uses server-side form validation, anti-abuse rate limiting and access-controlled lead storage, with notifications queued separately from the original submission. No internet service can guarantee absolute security. We limit the information requested to what is relevant to an institutional enquiry.

Enquiry records are retained for as long as they are reasonably needed to respond, maintain appropriate business records, resolve disputes or comply with applicable law. We assess removal requests against those purposes and any legal requirements. Unfinished signup links expire after 48 hours; expired registration drafts are removed after a short cleanup period. Completed registration metadata is retained temporarily for troubleshooting and processing evidence, while the preview account follows its own account-retention process. Cookie expiry periods are listed in the cookie policy.

Subject to the conditions in applicable law, including the Nigeria Data Protection Act, 2023, you may request access to personal information we hold about you, ask us to correct inaccurate information, request deletion or restriction, object to certain processing, or request portability where applicable. You may withdraw consent for consent-based processing without affecting processing lawfully carried out before withdrawal.

To exercise a right, write to [email protected]. We may ask you to verify your identity before releasing or changing information. You also have the right to complain to the Nigeria Data Protection Commission.

This public website and preview workspace are intended for institutional decision-makers, not children. Please do not send pupil names, guardians' identities, academic records, health details, pickup authorisations or other children's personal information through the demo or signup forms. Safe Pickup is a separate authenticated product workflow; the preview workspace does not collect or process real school handover records.

We may update this notice when our services, providers or legal obligations change. The date at the top shows when this version was last revised. Material changes to how information is used will require appropriate notice and, where necessary, a fresh choice.

Read the cookie policy for preference settings, or our website terms for use of the public website.