Data Protection & Privacy Notice
Mary Royal School · Obunga, Kisumu, Kenya
Strict Least Privilege
Server-enforced access boundaries
Only authorized staff hold access to sensitive learner records. Teachers see only their assigned classes, Accountants see only fee balances and invoices without academic or disciplinary notes, and only the Secretary and Head Teacher may modify learner profiles.
Child Health & Safety
Restricted & audited medical notes
Medical conditions and allergies are restricted to authorized roles. Sensitive profile views are recorded in the school access log; the school should review access and retention controls regularly.
Parent Rights & Correction
Direct office resolution
Parents have full visibility into their verified children's academic assessments, attendance registers, and fee statements. Requests for corrections or guardian links may be lodged directly with the Head Teacher or Director.
Local-First Storage
No third-party cloud trackers
This hosted system stores school information with school-approved service providers. Private learner files are served through authenticated application routes. Optional assignment drafting uses a local model only; learner content is not sent to an external AI service.
School Operational Guidelines
This school portal is designed exclusively to support learning, school administration, and parent-school collaboration. It holds learner identity records, daily attendance logs, CBC competency marks, guardian contact details, health and safeguarding information, learning activity, and school fee statements for admission, learner welfare, education, communication, and accounting purposes. The school collects only fields it considers necessary for those purposes.
Before processing a child's personal data, the school must obtain and record verifiable consent from a parent or guardian, explain how the information is used, and protect the child's best interests. Data is accessible only to accounts whose role permits it. The hosted database and file storage are provided by third-party infrastructure providers selected by the school; cross-border safeguards and provider contracts must be confirmed by the school before real learner data is entered.
A parent or guardian may contact the school to request access, correction, restriction, objection, or deletion where applicable. The Director can export a learner's system records. The school must verify the requester, consider legal record-keeping duties, and document its decision. A full in-app anonymization/deletion workflow and complete file export are not currently available.
Records should be kept only as long as necessary for school and legal purposes, then securely deleted or anonymized. The school must approve and publish its retention schedule before production use; abandoned admission drafts have a 365-day purge tool, while other records are not yet automatically purged. This notice is a draft for review by the school's data protection lead and is not legal advice or a compliance certificate.
Always protect your password and any downloaded receipts or term report cards. Never leave a session active on a shared computer. For data access inquiries or account assistance, please contact the School Office:
Office of the Director & Head Teacher
Mary Royal School · Obunga, Kisumu, Kenya · Contact the school office using its verified current contact details.