Privacy Policy

1. Introduction

Mainland Business School (MBS), located at UNICEM Road, Anyanghase, Akpabuyo, Cross River State, Nigeria, is committed to protecting the privacy and security of personal data in accordance with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR) 2019, and international standards including the General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://mbsedu.com.ng, use our student portal, apply for admission, enroll in programmes, or interact with our services.

2. Information We Collect

We may also collect technical data such as IP address, browser type, device information, and usage data through cookies and analytics tools.

3. How We Collect Information

• Directly from you when you fill forms, register, apply, or communicate with us
• Automatically through our website, student portal, and learning management systems
• From third parties such as examination bodies, previous institutions, or payment processors
• Through CCTV and security systems on campus (where applicable)

4. How We Use Your Information

We use your personal data for the following legitimate purposes:

5. Sharing of Personal Data

We do not sell your personal data. We may share data with:

• Regulatory bodies (e.g., National Board for Technical Education - NBTE, Joint Admissions and Matriculation Board - JAMB)
• Service providers (LMS platforms, payment gateways, cloud hosting) under strict data processing agreements
• Affiliated institutions for credit transfer or articulation agreements
• Legal authorities when required by law

6. Legal Basis for Processing (NDPA & GDPR)

Our processing is based on:

• Consent — where you have given clear consent
• Contract — performance of our contract with you (enrollment, education services)
• Legal Obligation — compliance with Nigerian laws
• Legitimate Interests — improving education quality and institutional operations
• Public Interest / Official Authority — as an educational institution

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, regular security audits, and staff training. However, no system is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Nigerian law (e.g., for academic records, longer retention periods apply). Alumni data may be retained indefinitely for legitimate institutional purposes.

9. Your Rights as a Data Subject

To exercise these rights, please contact our Data Protection Officer.

10. Cookies and Tracking Technologies

We use essential cookies for website functionality and analytics cookies (with consent) to understand user behavior. You can manage cookie preferences through our cookie consent banner or your browser settings.

11. Children's Privacy

We do not knowingly collect data from children under 13 without verifiable parental consent, in line with NDPR requirements for child-friendly notices and the Child Rights Act. For programmes involving minors, additional safeguards apply.

12. International Data Transfers

Where we transfer data outside Nigeria, we ensure appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are in place.

13. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review it periodically.

14. Contact Us