Privacy Policy
Last Updated: January 15, 2024. Your data privacy is our highest priority.
1. Overview
ShuleHQ ("we," "our," or "us") is committed to protecting the privacy of school administrators, teachers, parents, and students. This Privacy Policy explains how we collect, use, and protect information within our school management system.
We operate in strict accordance with the Kenya Data Protection Act, 2019.
2. Data Collection
We collect information necessary to provide school management services, including:
- School Information: Name, address, registration details, and contact information.
- Staff Information: Name, professional credentials, and system login credentials.
- Parent Information: Contact details, M-Pesa phone numbers for fee reconciliation.
3. Student Records
Student data is treated with the highest level of sensitivity. ShuleHQ acts as a Data Processor for the school, which remains the Data Controller.
Zero Third-Party Sharing
We never sell, trade, or share student academic or personal records with third-party advertisers or data brokers under any circumstances.
4. Security Measures
We implement industry-standard encryption (AES-256) for all data at rest and TLS for all data in transit. Access is controlled via strict Role-Based Access Control (RBAC).
5. Your Rights
Under the Kenya Data Protection Act, users have the right to access their data, request corrections, and request deletion (Right to be Forgotten), subject to mandatory school record retention laws.
For any privacy-related inquiries, please contact our Data Protection Officer at dpo@shulehq.co.ke