Last updated at launch
This is the default policy text. Please have it reviewed before launch and edit it from Admin → Policy pages.
Noah's Ark Kindakare ("we", "us") runs this website and the parent portal. We follow the Data Protection and Privacy Act, 2019 of Uganda and its 2021 Regulations. This policy explains what personal data we collect, why, and the rights you have.
Who we are
Noah's Ark Kindakare, Ssenyonga Road, Kabalagala, Kampala, Uganda. Questions about your data: info@noahsarkkindakare.com or +256782 698327.
What we collect
- Parent account: your name, email address, phone number and password (stored only as a secure hash). If you turn on two-step sign-in, a secret key is kept in encrypted form.
- Admission applications: your child's name, date of birth, gender, nationality, languages and class; details of parents or guardians; emergency contacts and people allowed to collect your child; health information you choose to give us; and copies of documents such as a birth certificate and immunisation card.
- Event bookings: name, email, phone number and the tickets you booked.
- Payments: the amount, date and a payment reference. Card and mobile money details are entered on Flutterwave's secure page, and we never see or store them.
- Contact form and blog comments: the details you type in.
- Technical data: the IP address and browser type used to sign in, used to protect your account (for example, to warn you of a sign-in from a new device).
We do not ask for national ID numbers.
Why we use it
- To consider and manage your child's application and, if accepted, their place at the school.
- To keep your child safe, including dealing with medical emergencies and checking who collects them.
- To manage event bookings and payments.
- To reply to your messages and keep you informed about school life.
- To protect the website and your account from misuse.
We rely on your consent (which you give in the application form), on the need to take steps before enrolling your child, and on our legal duties as a school.
Children's data
Information about children is handled with extra care. Health details are encrypted in our database, documents are kept in private storage, and only authorised staff can open them. Every time staff open an application or a document, it is recorded.
Photos
We only publish photos of children when a parent has agreed. You can change your photo choice at any time by contacting the school office.
Who we share it with
Only with the people who help us run the service: Flutterwave (payments), our email provider and our web host. We never sell personal data. We may share information when the law requires it, or to protect a child from harm.
How long we keep it
- Unfinished applications: deleted after 6 months without changes.
- Applications that do not lead to a place, or that are withdrawn: up to 12 months after the decision.
- Records of enrolled children: for as long as the law requires school records to be kept.
- Contact messages: up to 24 months.
Your rights
You can ask to see the data we hold about you or your child, ask us to correct it, object to its use or ask us to delete it where the law allows. Write to info@noahsarkkindakare.com. You can also complain to the Personal Data Protection Office (www.pdpo.go.ug).
Security
We use encrypted connections (HTTPS), two-step sign-in, encrypted storage for sensitive fields, strict access controls and activity logs.
Changes
We will post any changes on this page and update the date below.