Privacy Policy

1 Who We Are

Leone Digital Africa Limited (trading as Lardi) is a technology company based in Accra, Ghana. We build and operate the Lardi School Management System — a cloud-based platform for Ghanaian private schools.

In data protection terms, we act as a Data Processor. Your school is the Data Controller. This means your school decides what data is collected and why. We process it only on your school's instructions to provide the system.

Contact: hello@lardigh.com · lardigh.com · Accra, Ghana

2 What Data We Collect

We collect only the data necessary to operate the school management system. This includes:

• Student data — full name, date of birth, gender, class, home address, enrolment date
• Parent and guardian data — full name, phone number, email address
• Academic records — attendance records, subject grades, report card data, term summaries
• Financial records — fee payment amounts, payment method and reference numbers, payment dates. We do not collect bank account numbers or card details.
• Staff data — full name, role, department, phone number, email address, salary (admin only)
• Library records — book borrowing history per student
• User account data — email address, assigned role, login activity

We do not collect health records, political opinions, religious beliefs, ethnic origin, biometric data or any other special category data as defined under Section 37 of Act 843.

3 Why We Process Your Data

Personal data is processed solely to provide the Lardi School Management System to your school. This includes:

• Maintaining student enrolment records and profiles
• Recording and reporting daily attendance
• Recording grades and generating report cards
• Tracking fee payments and generating receipts
• Managing staff records and access
• Enabling parents and students to view their own records
• Generating administrative reports and data exports for the school
• Sending school announcements to parents, students and staff

We will not process your data for any other purpose without the prior written consent of your school.

4 How We Keep Your Data Safe

We implement the following technical and organisational security measures in compliance with Section 28 of Act 843:

• Encryption — all data is encrypted at rest and in transit using industry-standard protocols
• Cloud infrastructure — data is stored on Google Firebase (Firestore), one of the most secure cloud database platforms in the world
• HTTPS — all connections to Lardi use HTTPS encryption via Cloudflare
• Role-based access — administrators, teachers, parents and students each see only the data relevant to their role. A teacher cannot see fee records. A parent can only see their own child's data.
• Authentication — user passwords are managed by Firebase Authentication and are never stored in plain text
• Access controls — only Leone Digital Africa Limited personnel with a legitimate need for system maintenance may access school data, and only to the minimum extent necessary

5 Where Your Data Is Stored

School data is stored on Google Firebase servers located in Europe (region: eur3). This cross-border transfer is necessary to provide the cloud-based system.

Google operates under internationally recognised data protection standards including ISO 27001, SOC 2 and SOC 3 certifications. This transfer is made in accordance with Section 28(3)(b) of Act 843.

We do not transfer school data to any other country or jurisdiction without the prior written consent of the school.

6 How Long We Keep Your Data

Personal data is retained for the duration of the school's active subscription with Leone Digital Africa Limited.

Upon termination of the subscription for any reason, school data will be retained for 30 days. During this period the school may request a full data export at any time. After 30 days all school data will be permanently deleted from our systems in a manner that prevents reconstruction.

Schools are responsible for maintaining their own archives of student records as required by any applicable laws or regulations governing educational institutions in Ghana.

7 Your Rights Under Act 843

Under the Data Protection Act, 2012 (Act 843), you have the following rights regarding your personal data:

To exercise any of these rights, contact your school administrator as the Data Controller, or contact Leone Digital Africa Limited directly at hello@lardigh.com. We will respond within 40 days as required by Section 35(10) of Act 843.

8 Data Breach Notification

In the event of a personal data breach, Leone Digital Africa Limited will notify the affected school without undue delay. The notification will include the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken to address it.

The school, as Data Controller, is responsible for notifying the Data Protection Commission and affected individuals as required by Section 31 of Act 843.

9 Sub-Processors

Leone Digital Africa Limited uses the following trusted sub-processors to provide the service:

We ensure all sub-processors are bound by data protection obligations equivalent to those in our Data Processing Agreement.

10 Cookies and Tracking

Lardi does not use advertising cookies, tracking pixels or third-party analytics. The only data stored in your browser is your authentication session, which is required for you to stay logged in. This session expires automatically when you sign out or close your browser.

We do not display advertisements and we do not share data with advertising networks.

11 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify schools by email or through an announcement in the system. The updated policy will show a new effective date at the top of this page.

Continued use of Lardi after notification of changes constitutes acceptance of the updated policy.