📚 2027 Admissions Now Open — Crèche to Junior School, Lower Kabete  Book a Slot →

PRIVACY POLICY

KIVULINI SCHOOLS PRIVACY POLICY

Effective Date: 11 Jan 2026

Effective Date: 11 September 2026

Kivulini Schools (“Kivulini”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us by learners, parents, guardians, prospective families, staff, visitors and users of our website.

This Privacy Policy explains how Kivulini Schools collects, uses, stores, protects and handles personal information when you visit kivulinischools.co.ke, contact us, enquire about admission, request information, visit our school or otherwise interact with us.

We process personal data in accordance with applicable Kenyan data protection laws, including the Data Protection Act, 2019 and applicable regulations and guidance issued by the Office of the Data Protection Commissioner (ODPC).

1. Who We Are

Kivulini Schools is an educational institution providing learning from Crèche through Junior School, Grade 9.

For personal data processed through our website and in connection with our school services, Kivulini Schools may act as a data controller, meaning that we determine the purposes and means for which personal information is processed.

For certain activities, we may work with third-party service providers who process information on our behalf.


2. Information We Collect

Depending on how you interact with Kivulini, we may collect different types of information.

Information you provide to us

This may include:

  • Parent or guardian name
  • Learner’s name
  • Email address
  • Telephone or WhatsApp number
  • Residential or postal address
  • Learner’s age and date of birth
  • Current school or educational information
  • Admission and enquiry information
  • Information provided through contact or enquiry forms
  • Information provided when booking a school visit
  • Any other information you voluntarily provide when communicating with us

Where information relating to a learner is provided by a parent or guardian, we may process that information for purposes connected with admission, education, administration, safeguarding and the provision of school services.

Information collected automatically

When you visit our website, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and device information
  • Pages visited
  • Date and time of visits
  • Referring websites
  • General website usage information
  • Information collected through cookies and similar technologies

We use this information primarily to operate, secure and improve our website and understand how visitors use it.


3. How We Use Personal Information

Kivulini may use personal information for purposes including:

  • Responding to enquiries
  • Processing admission enquiries and applications
  • Arranging school visits and tours
  • Communicating with parents and guardians
  • Providing information about our programmes and school activities
  • Managing learner enrolment and school administration
  • Providing education and related services
  • Managing school transport where applicable
  • Maintaining school and learner records
  • Improving our website, services and parent experience
  • Maintaining website security
  • Meeting legal, regulatory and administrative obligations
  • Communicating important school information
  • Managing complaints, enquiries and requests

We will collect and use personal information only for legitimate and specified purposes and will seek to limit the information collected to what is reasonably necessary for those purposes. This reflects the data-protection principles recognised by the ODPC.


4. Children’s Personal Information

Kivulini Schools recognises that learners are often minors and that information relating to children requires particular care.

We may collect and process information relating to learners where this is necessary for admission, education, safeguarding, school administration, communication with parents or guardians, or the provision of school-related services.

Where appropriate, we will obtain information from or through a parent, guardian or other person authorised to act on behalf of the learner.

We will take reasonable measures to protect children’s personal information from unauthorised access, disclosure, alteration or loss.

We will not knowingly use children’s personal information for purposes unrelated to the legitimate provision and administration of our educational services.


5. Lawful Basis for Processing

Depending on the circumstances, Kivulini may process personal information on the basis of:

  • Consent
  • Performance of a contract or steps taken at the request of the data subject before entering into a contract
  • Compliance with a legal obligation
  • Legitimate interests, where applicable
  • Other lawful bases recognised under applicable Kenyan data-protection law

Where processing relies on consent, you may withdraw that consent where legally applicable. Withdrawal of consent does not affect processing that took place before the withdrawal.


6. Sharing Personal Information

We do not sell personal information.

We may share personal information where reasonably necessary with:

  • Authorised Kivulini staff
  • Parents or guardians where appropriate
  • Service providers supporting our website, communications, technology or school operations
  • Professional advisers where necessary
  • Government, regulatory or law-enforcement authorities where required by law
  • Other parties where you have authorised us to disclose the information

Where third-party service providers process personal information on our behalf, we expect appropriate confidentiality and data-protection safeguards to be maintained.


7. Website Forms and Enquiries

Information submitted through forms on the Kivulini website may be used to:

  • Respond to your enquiry
  • Contact you regarding admissions
  • Arrange a school visit
  • Provide requested information
  • Follow up on an enquiry where appropriate

Please do not submit information through a general website enquiry form that is not necessary for the purpose of your enquiry.


8. Cookies and Website Analytics

Our website may use cookies and similar technologies to help it function properly and to understand how visitors interact with our website.

Cookies may help us:

  • Remember certain preferences
  • Improve website functionality
  • Understand website traffic and usage
  • Identify technical problems
  • Improve the user experience

Where third-party analytics, advertising or embedded services are used, those services may process certain technical information in accordance with their own privacy policies.

You can manage or restrict cookies through your browser settings. Restricting certain cookies may affect some website functionality.


9. Third-Party Websites and Services

Our website may contain links to third-party websites, including social media platforms and other external services.

Kivulini is not responsible for the privacy practices, security or content of third-party websites.

We encourage users to review the privacy policies of external websites before providing them with personal information.


10. Data Security

Kivulini takes reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access
  • Unauthorised disclosure
  • Loss
  • Misuse
  • Alteration
  • Destruction

However, no website, online system or electronic transmission can be guaranteed to be completely secure.

We therefore encourage users to exercise appropriate caution when submitting personal information online.


11. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide our services, to meet legal and regulatory obligations, resolve disputes, maintain appropriate records or otherwise protect our legitimate interests.

Retention periods may differ depending on the type and purpose of the information.

When information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.


12. Your Data Protection Rights

Subject to applicable law, you may have rights including the right to:

  • Be informed about how your personal information is being used
  • Request access to personal information we hold about you
  • Request correction of inaccurate or misleading information
  • Request deletion or erasure of personal information where applicable
  • Object to certain forms of processing
  • Request restriction of processing in applicable circumstances
  • Withdraw consent where processing is based on consent
  • Exercise other rights available under applicable data-protection law

The ODPC identifies rights including information, access, objection, correction and deletion, alongside other rights recognised under Kenya’s data-protection framework.

Where a request concerns a learner who is a minor, we may require the request to be made by a parent, guardian or other person legally authorised to act on the learner’s behalf.


13. How to Exercise Your Rights

To make a privacy or data-protection request, contact Kivulini Schools using the details below.

Please provide enough information for us to understand your request and identify the relevant information.

We may need to take reasonable steps to verify the identity or authority of the person making a request before releasing or changing personal information.


14. International Data Transfers

Some technology and service providers we use may process or store information outside Kenya.

Where personal information is transferred outside Kenya, Kivulini will take appropriate measures required by applicable data-protection law to ensure that the information receives an appropriate level of protection. Kenya’s data-protection framework places specific requirements on transfers of personal data outside Kenya.


15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing practices.

The updated version will be published on this page with an updated effective date.

We encourage parents, guardians and website users to review this page periodically.


16. Contact Kivulini Schools

If you have questions about this Privacy Policy, wish to exercise a data-protection right, or have a concern about how your personal information is handled, please contact us:

Kivulini Schools
Kirangari–Gikuni Road, off Gitaru–Ndenderu Road
Lower Kabete, Kabete Sub-County
Kiambu County, Kenya

Phone / WhatsApp: +254 713 417 792
Email: info@kivulinischools.co.ke
Social Media: @kivulinischool