Privacy Policy

Our commitment to privacy

Lavington United Church Academy respects the privacy of pupils, parents, guardians, staff, applicants and website visitors. This notice explains how information submitted through this website is collected, used, protected and retained.

Information we may collect

Depending on how you use the website, we may receive names, contact details, enquiry information, admission application details, information about a child supplied by a parent or guardian, uploaded admission documents, and technical information needed to operate and secure the website.

Why we use information

We use information to respond to enquiries, process admission applications, communicate with families, operate the website, protect our systems, and carry out legitimate school administration. We aim to collect only information reasonably needed for these purposes.

Children's information

Admission information about a child should be provided by a parent, guardian or another person with appropriate authority. Children's information is handled with particular care and is only made available to authorised persons who need it for the relevant school purpose.

Sharing and service providers

We may use carefully selected service providers for website hosting, email delivery, backups and other technical functions. Information is not sold. Where a service provider processes information on our behalf, the Academy expects appropriate confidentiality and security safeguards.

Retention and security

Information is kept only for as long as reasonably necessary for the purpose for which it was collected, school administration, safeguarding, legal requirements, or the establishment and defence of legitimate claims. We use organisational and technical measures intended to protect information against unauthorised access, loss, alteration or disclosure.

Your data protection rights

Subject to applicable law, individuals may have rights to be informed about processing, access personal data, request correction of inaccurate data, object to certain processing, and request deletion where applicable. Where the data subject is a minor, those rights may be exercised by a parent, guardian or other authorised person.

Kenyan data protection framework

The Academy aims to handle personal data in accordance with Kenya's Data Protection Act, 2019, applicable regulations and relevant guidance issued by the Office of the Data Protection Commissioner (ODPC), including guidance for the education sector.

Contact us about privacy

For a privacy request or concern, please contact the Academy using the privacy contact details published on this website. You may also contact the Office of the Data Protection Commissioner where applicable.

Updates to this notice

We may update this notice as the website, school processes or applicable requirements change. The current version will remain available on this page.