Compliance First
Privacy Policy
Transparent details on how Mumbe Group of Schools collects, protects, and uses your information across our digital and on-campus services.
Encryption
AES-256
All academic records at rest
Response Time
24h
Average support turnaround
Requests
0
Annual privacy reviews
Introduction
Mumbe Group of Schools ("we," "us," or "our") respects your privacy and is committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019 (DPA) and other applicable data protection laws. This policy outlines our transparency regarding the data we process.
This document applies to all visitors, students, parents, and staff interacting with our digital infrastructure and campus services. As a data controller, we are responsible for ensuring your personal data is processed lawfully, fairly, and transparently.
Legal Basis: We process personal data based on consent, contractual necessity (enrollment agreements), legal obligations (Ministry of Education requirements), and legitimate interests (school administration and safety).
Information Collection
Provided by You
- • Enrollment & academic records
- • Parent/guardian contact details
- • Billing and financial credentials
- • Medical & emergency information
Automated Data
- • IP address & device telemetry
- • Browser type & session duration
- • Navigation paths on portals
- • Security access logs
How We Use Data
Academic & Admin
Managing enrollment, grading, and curriculum delivery.
Communication
Providing critical school alerts and performance updates.
Safety
Ensuring campus security and digital safeguarding.
Legal
Compliance with Ministry of Education regulations.
Data Security
We employ industry-standard encryption (AES-256) and multi-factor authentication for all student databases. Our security measures comply with the Kenya Data Protection Act, 2019 and international best practices. While we maintain rigorous defensive protocols, no digital transmission is entirely risk-free. We encourage users to maintain secure account credentials.
Your Rights
Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data where legally permissible.
Right to Object
Object to processing of your data for certain purposes.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Withdraw Consent
Withdraw consent for data processing at any time.
Note: To exercise any of these rights, contact our Data Protection Officer at privacy@mumbeschools.co.ke. We will respond within 30 days as required by law.
Children's Privacy
As an educational institution, we process data for students of all ages. We take special care to protect the privacy of children under 18 years of age in accordance with Kenyan law and international standards.
Parental Consent: For students under 18, we obtain parental or guardian consent before collecting personal information for non-essential purposes.
Limited Collection: We only collect information necessary for educational administration, student welfare, and legal compliance.
Access Rights: Parents and guardians have the right to access, review, and request deletion of their child's personal information.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you through:
- •Email notification to registered users and parents
- •Prominent notice on our website and student portals
- •School communication channels (SMS, newsletters)
Last Updated: January 8, 2025
Effective Date: January 8, 2025
Version: 1.0
Contact Administration
Data Protection Officer
Mumbe Group of Schools Head Office
Responses to data access requests are processed within 30 business days as required by the Kenya Data Protection Act, 2019.
For general inquiries, complaints, or to exercise your data protection rights, please visit our contact page:
Contact UsOffice of the Data Protection Commissioner: If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke