Privacy Policy

Last updated: 1 June 2026. This Privacy Policy explains how UPRL collects, uses, and protects your personal data.

NDPA 2023 Compliant
This policy complies with the Nigeria Data Protection Act 2023 and NDPR 2019.

1. Introduction

The University of Public Relations and Leadership (“UPRL”, “we”, “our”, or “us”), a higher education institution licensed by the National Universities Commission (NUC) and operating from Abuja, Federal Capital Territory, Nigeria, is committed to protecting your personal data and privacy.

This Privacy Policy applies to all personal data collected via our website (www.uprl.edu.ng), online admissions portal, student information systems, research platforms, event registrations, and any other services or digital touchpoints operated by UPRL.

By accessing or using UPRL services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, you should discontinue use of our services.

This policy is drafted in compliance with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (NDPR), and applicable international standards including the EU General Data Protection Regulation (GDPR) where applicable to our international partners and students.

2. Personal Data We Collect

We collect personal data in the following categories, depending on your relationship with UPRL:

2.1 Prospective Students & Applicants

Full legal name, date of birth, gender, nationality, and state of origin
Contact details: email address, phone number, home address
Academic qualifications, JAMB registration number, O’Level results
Personal statement and supporting application documents
Reference letters and referee contact information
Payment records for application fees

2.2 Enrolled Students

Student identification number, matriculation details, academic records
Attendance, assessment grades, examination results, and degree classification
Financial records including tuition payment history and scholarship detail
Health information (where provided for welfare or accommodation purposes)
Disciplinary records (where applicable)
Photographs and biometric data for student ID purposes

2.3 Website Visitors

IP address, browser type, device information, and operating system
Pages visited, time spent on pages, and referral sources
Cookie identifiers and session data (see Cookies Policy below)
Contact form submissions and newsletter sign-up information

2.4 Staff & Job Applicants

CV/resume, qualifications, employment history, and references
National Identification Number (NIN), tax identification, and payroll data
Performance appraisals and professional development records

3. How We Use Your Personal Data

UPRL processes personal data only for lawful, specified, and legitimate purposes, including:

Admissions Processing: Evaluating applications, communicating offers, and managing the matriculation process
Academic Administration: Managing student records, examinations, results, and degree awards
Financial Administration: Processing tuition fees, scholarships, refunds, and financial aid
Student Welfare: Providing health, counselling, accommodation, and support services
Communication: Sending important notices, newsletters (with consent), event invitations, and institutional updates
Legal Compliance: Meeting obligations under Nigerian education law, tax regulations, and NUC reporting requirements
Research & Statistics: Producing aggregated, anonymised institutional statistics and academic research (with appropriate ethical approval)
Security: Protecting the physical and digital security of persons and assets on UPRL premises and systems
Website Improvement: Analysing website usage to improve user experience and content

The legal bases we rely on under the NDPA 2023 include: consent, contractual necessity, legal obligation, legitimate interests, and vital interests.

4. Data Sharing & Disclosure

UPRL does not sell, rent, or trade your personal data. We may share your data with:

Regulatory Bodies: National Universities Commission (NUC), Joint Admissions and Matriculation Board (JAMB), West African Examinations Council (WAEC), and other lawfully mandated authorities
Government Agencies: Nigerian Immigration Service (for international student visa matters), Federal Inland Revenue Service (FIRS), and relevant federal/state government bodies
Partner Universities: Where you participate in exchange programmes or joint degrees, relevant academic data may be shared with partner institutions under data sharing agreements
Service Providers: Third-party processors (e.g., payment processors, IT providers, cloud hosting services) who act under strict data processing agreements and may not use your data for their own purposes
Employers & Referees: Where you have explicitly consented to release of academic transcripts or references for employment or further study
Law Enforcement: Where required by court order, legal process, or to protect the safety of persons

5. Data Retention

UPRL retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law.

6. Your Data Rights

Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data held by UPRL:

Right of Access

Request a copy of the personal data UPRL holds about you.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your data where it is no longer necessary or lawfully processed.

Right to Object

Object to processing of your data for direct marketing or where we rely on legitimate interests.

Right to Portability

Receive your data in a structured, machine-readable format where technically feasible.

Right to Withdraw Consent

Withdraw consent at any time where we process data on the basis of your consent.

To exercise any of these rights, contact our Data Protection Officer (DPO) at dpo@uprl.edu.ng. We will respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

7. Cookies Policy

Our website uses cookies — small text files stored on your device — to improve your experience

You can manage or withdraw cookie consent at any time via your browser settings or our Cookie Preferences Centre. Note that disabling certain cookies may affect website functionality.

8. Data Security

UPRL implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These include:

SSL/TLS encryption for all data transmitted via our website and portals
Role-based access controls limiting data access to authorised personnel only
Regular security audits and penetration testing of our IT systems
Staff training on data protection and information security
Secure, encrypted backup systems with disaster recovery protocols
Data breach response procedures in compliance with NDPA 2023 reporting obligations

In the event of a personal data breach likely to result in significant harm, we will notify the Nigeria Data Protection Commission and affected individuals within 72 hours of becoming aware of the breach, as required by law.

9. Children's Privacy

UPRL’s services are primarily directed at adults aged 16 and above. We do not knowingly collect personal data from children under the age of 13 without verifiable parental consent. If we become aware that we have collected data from a child without appropriate consent, we will delete it promptly.

For prospective students under 18 years of age, parental or guardian consent is required as part of the admissions process, and data is handled with additional care and restriction.

10. Changes to This Policy

UPRL reserves the right to update this Privacy Policy from time to time to reflect changes in law, our services, or best practice. When we make material changes, we will:

Update the “Last Updated” date at the top of this page
Notify registered users via email where the changes are significant
Post a prominent notice on the UPRL website homepage

Continued use of our services after changes to this Policy constitutes acceptance of the updated terms.

11. Contact Our Data Protection Officer

For all data protection enquiries, rights requests, or complaints, please contact UPRL’s designated Data Protection Officer:

Data Protection Officer
University of Public Relations and Leadership (UPRL)
UPRL Campus, Abuja, Federal Capital Territory, Nigeria

📧 dpo@uprl.edu.ng

📞 +234 800 UPRL NIG

We aim to respond to all data protection requests within 30 calendar days.

Follow Us