Data Protection and Security Statement

PART E - PUBLIC DATA-PROTECTION AND SECURITY STATEMENT

TestServes processes school and academic information with particular attention to children, access control and examination integrity. Its programme is designed around the Nigeria Data Protection Act 2023 and applicable NDPC guidance.

Shared responsibility

Schools decide which users and records are placed in their portals and must assign appropriate permissions, maintain accurate information and remove access that is no longer required. TestServes operates the platform, supports schools and protects information within the systems it controls.

Measures

Only measures confirmed in production should remain in the published version. The verified statement may include HTTPS encryption in transit; secure password hashing; role-based access; school-level logical separation; least-privilege administration; controlled backups; security logging; vulnerability and patch management; incident-response procedures; and confidentiality requirements for authorised personnel.

Reporting

Suspected security or privacy concerns may be reported to testserves.ng@gmail.com, the TestServes contact form or official WhatsApp support. Reports should describe the issue without accessing, downloading or disclosing more personal data than necessary. TestServes may request reasonable information to investigate.

No absolute guarantee

No internet service can guarantee absolute security. TestServes reviews risks and improves controls in proportion to the nature of its service. This statement is not a technical specification or permission to conduct security testing.