Privacy Policy

1. Who We Are

This Privacy Policy applies to the official website of Dr. Ken Gerdes Mixed Day and Boarding Senior School, located on the Kitale–Webuye Road, 13 km from Kitale Town, Trans-Nzoia County, Kenya (“the School”, “we”, “our”, “us”).

2. Information We Collect

We collect personal information only when you actively provide it, specifically when you:

• Submit a student application form (student name, date of birth, gender, previous school, KJSEA grade, parent/guardian name, phone, email, postal address, medical conditions)
• Submit a contact enquiry (name, email, phone number, message)
• Leave a comment on a news article (name and comment content)
• Browse the website (anonymised usage data via Vercel Analytics)

We do not collect payment card information, national ID numbers, or any sensitive personal data beyond what is listed above.

3. How We Use Your Information

• To process and respond to school admission applications
• To respond to general enquiries
• To send confirmation messages via email or WhatsApp
• To moderate and display approved comments on news articles
• To improve website performance via anonymised analytics
• To comply with legal obligations applicable in Kenya

We will never use your information for marketing purposes without your explicit consent.

4. How We Store and Protect Your Data

Application and enquiry data is stored in a secure Supabase database (hosted on AWS infrastructure) with row-level security enabled. Access is restricted exclusively to authorised school administrators protected by JWT-based authentication.

All data is transmitted over HTTPS (TLS 1.2+). Our website is hosted on Vercel, which maintains SOC 2 Type II compliance.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only with:

• Supabase — secure database storage
• Brevo (Sendinblue) — email delivery service
• UltraMsg — WhatsApp notification service
• Vercel — website hosting and analytics
• Kenyan government or law enforcement agencies, if legally required

6. Cookies & Analytics

Our website uses Vercel Analytics which collects anonymised, aggregated usage statistics (pages visited, country, device type). No personally identifiable information is collected by analytics. No cross-site tracking cookies are set.

If Google Analytics is enabled in future, we will update this policy accordingly and obtain consent where required.

7. Data Retention

Application data is retained for a maximum of 3 years after the application date or until admission is confirmed, whichever is earlier. Enquiry data is retained for 1 year. News comments are retained for the lifetime of the article unless deleted by an administrator.

8. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Object to the processing of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at drkengerdesseniorschool@gmail.com or call +254 700 418 129.

9. Children's Privacy

Our website is intended for use by parents, guardians and adult students. Where we collect information about minors (e.g. student application data), this is provided by a parent or guardian who takes responsibility for the accuracy and consent of that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated “Last updated” date. Continued use of the website after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact us: