Privacy Policy

How we collect, use, share, secure and retain personal data across D3F Solutions products.

Who We Are & Scope

D3F Solutions (“D3F”, “we”, “us”) builds ERP and management software, including Scholaria, MakerSuite, ProStore, Ekklesia, EstateOS, FacilityOS, AriyoEvents, Aperla and LaundryPro, plus custom software, web and solar/inverter services. This policy applies when you visit our websites and apps, use our products and services, communicate with us (support, sales, social media), or act as a customer’s end-user (e.g., a school using Scholaria).

Controller

D3F Solutions, Nigeria.

Last Updated

23 September 2025

The Data We Collect

Identity & Account

Names, usernames, roles, emails, phone numbers, addresses, hashed passwords, MFA status, roles/permissions.

Product & Transactional

Orders, invoices, donations/giving (Ekklesia), payment references from processors (e.g., Paystack), student records (Scholaria), QR scan logs (MakerSuite).

Operational & Support

Device/IP data, auth/admin action logs, error logs, tickets/emails/attachments, marketing preferences (if subscribed).

How & Why We Process Data

How We Collect

Directly from you, from your organization (enterprise accounts), automatically via cookies/SDKs/logs, and from third parties (payments/identity providers).

Provide Our Services

Account creation, access control, QR validation, student records. Legal basis: Contract necessity; Legitimate interests.

Security & Compliance

MFA, audit trails, incident response, tax & regulatory duties. Legal basis: Legitimate interests; Legal obligation.

Payments & Support

Process payments via Paystack (and future 9PSB), issue receipts; troubleshoot and notify. Legal basis: Contract necessity.

Improvement & Analytics

Usage analytics and surveys to improve performance. Legal basis: Legitimate interests; Consent where required.

Marketing (Optional)

Newsletters and updates only with consent or permissible B2B soft opt-in. You can opt out anytime.

Cookies

We use necessary cookies for login/security, and (optional) analytics cookies you can control via our banner/browser settings.

Children’s Data

Processed only under organizational instructions (e.g., schools/churches). We apply heightened safeguards and data minimization.

Sharing, Transfers & Retention

We do not sell personal data. We share it with processors acting on our instructions (hosting, email, analytics, payments, SMS/OTP, storage/CDN, error monitoring), with your organization’s admins (enterprise accounts), and with authorities where required by law or to protect rights and safety. We may transfer data internationally with appropriate safeguards. We retain data only for as long as necessary for its purpose and legal duties, after which we delete or anonymize it.

Account Data

Kept while your account is active and for a reasonable period after closure.

Logs & Security

Typically 6–24 months, aligned to security controls and legal needs.

Student Records

As directed by the institution (controller) and relevant regulations.

Your Rights

Subject to applicable law, you may request access, rectification, erasure, restriction, or objection; exercise data portability; and withdraw consent where applicable. To act on your rights, email privacy@d3fsolutions.com.ng with your product and account email. We may verify your identity and, for enterprise users, coordinate with your organization’s admin.

Product-Specific Notes

Scholaria

Secure storage for student images; configurable custom fields; retention rules aligned to academic policy.

Ekklesia

Minimal donor PII; payments processed by Paystack; strict role-based access to financial records.

MakerSuite & ProStore

MakerSuite: signed/expiring QR tokens; device log audits. ProStore: RBAC for price edits; change/export audit trails.

Questions or Requests?

If you have privacy enquiries, want to exercise your data rights, or wish to make a complaint, contact us:
privacy@d3fsolutions.com.ng  or call +234 808 472 0731

Postal: Suite 04, Ilerioluwa Complex, Orita Challenge, Ibadan, Oyo State, Nigeria.
You may contact the Nigeria Data Protection Commission (NDPC) if unresolved. EU/UK users may contact their local supervisory authority.

Last updated: 23 September 2025