Privacy Policy

At Junior Primary School, we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our school.

We comply with the Kenya Data Protection Act, 2019 and internationally recognized privacy principles. Please read this policy carefully to understand our practices regarding your personal data.

We collect several types of information from and about users of our website and members of our school community, including:

2.1 Personal Information You Provide

Category	Examples	Purpose
Contact Information	Name, email address, phone number, postal address	Communication, enrollment, inquiries
Student Information	Student name, age, grade level, medical information	Enrollment, academic records, health & safety
Parent/Guardian Information	Relationship to student, occupation, emergency contacts	Parent communication, emergency response
Payment Information	Bank details, payment history (processed securely)	Fee collection, financial management
Employment Information	Resume, qualifications, references	Job applications, recruitment

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and usage patterns:

• Log Data: IP address, browser type, operating system, referring URLs
• Usage Data: Pages visited, time spent, clicks, navigation patterns
• Device Information: Device type, screen resolution, language preferences
• Cookies: See our Cookie section for details

2.3 Information from Third Parties

We may receive information about you from:

• Previous schools (academic records)
• References provided during applications
• Government agencies (where required by law)
• Social media platforms (if you interact with our pages)

We use the information we collect for various purposes, including:

Under the Kenya Data Protection Act and GDPR, we process your personal information based on the following legal grounds:

• Contract Performance: To fulfill our enrollment agreements and provide educational services
• Legal Obligation: To comply with education laws, health regulations, and reporting requirements
• Legitimate Interests: To improve our services, ensure security, and communicate effectively
• Consent: For marketing communications and optional data collection (you can withdraw anytime)
• Vital Interests: In emergency situations to protect health and safety

We do not sell, rent, or trade your personal information. We may share information in the following circumstances:

5.1 Within the School

Access is limited to staff who need the information to perform their duties (teachers, administrators, medical staff).

5.2 Third-Party Service Providers

We engage trusted partners who assist in operating our school:

• Learning management systems
• Payment processors (PCI-DSS compliant)
• Communication platforms
• IT service providers
• Photographers (for school events)

5.3 Legal Requirements

We may disclose information when required by law:

• To comply with legal processes (court orders, subpoenas)
• To government authorities (Ministry of Education)
• To protect rights, safety, and property

5.4 With Consent

We may share photos or achievements with your explicit consent for marketing or publications.

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Strict role-based access to information
• Regular Backups: Secure, encrypted backups
• Staff Training: Regular privacy and security training
• Security Audits: Regular vulnerability assessments
• Incident Response: Procedure for data breach response

We retain personal information only as long as necessary:

Data Type	Retention Period	Reason
Student Records	5 years after graduation	Academic reference, transcripts
Application Records	1 year if not enrolled	Future applications, analytics
Financial Records	7 years	Tax and legal requirements
Employment Records	5 years after employment	Reference, legal compliance
Website Logs	12 months	Security, analytics

Under data protection laws, you have the following rights:

To exercise any of these rights, please contact our Data Protection Officer using the information in Section 13.

We use cookies and similar technologies to enhance your browsing experience and analyze website traffic.

9.1 Types of Cookies We Use

9.2 How to Control Cookies

You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

We are committed to protecting children's privacy:

• We collect information about children only from parents/guardians with consent
• We do not knowingly collect information directly from children under 13
• Student information is used only for educational purposes
• Photos and student work are published only with parental consent
• Parents can request access to their child's information at any time

Your information may be transferred to and processed in countries outside Kenya where our service providers operate. We ensure appropriate safeguards are in place:

• Standard contractual clauses approved by the EU Commission
• Binding corporate rules where applicable
• Privacy Shield certification (for US-based providers)
• Adequacy decisions for countries with equivalent protection

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last Updated" date at the top of this page
• Notify enrolled families via email or newsletter
• Post prominent notice on our website for significant changes

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

13.1 Complaint Procedure

If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority:

13.2 Make a Request

To exercise any of your privacy rights, please complete our Data Subject Request Form: