Privacy Policy
This Privacy Policy explains how SchoolNest ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you use schoolnest.ug.
We are committed to handling your personal data in accordance with the Data Protection and Privacy Act, 2019 (Uganda) and the Data Protection and Privacy Regulations, 2021.
We collect only what we need to run SchoolNest. We don't sell your data. We use trusted providers (Cloudflare, Brevo, Zoho) to keep the site fast and secure. You have the right to access, correct, or delete your data.
01 Who we are
Data Controller: SchoolNest
Contact: [email protected]
Phone / WhatsApp: +256 750 565 313
02 Personal data we collect
2.1 Data you provide directly
- School owner accounts: Full name, email address, phone number, role at the school.
- School listings: School name, contact details, address, fees, photos, and descriptions.
- Reviews: Name, rating, review text, and optionally your email.
- Contact form: Name, email, message.
- Tour / admission enquiries: Name, phone, email, and message content.
2.2 Data collected automatically
- Technical data: IP address, browser type, device type, operating system.
- Usage data: Pages visited, time spent, referring URL.
- Cookies: Session cookies for authentication, CSRF protection cookies, and analytics cookies.
2.3 Data from third parties
- Cloudflare: Processes all traffic to our site and provides aggregate analytics.
- Brevo: Our transactional email provider, which processes email delivery data.
03 How we use your personal data
| Purpose | Legal Basis (Uganda DPA 2019) |
|---|---|
| Operating your account and providing the service | Performance of a contract |
| Publishing school listings and reviews | Consent |
| Sending transactional emails (password resets, notifications) | Performance of a contract |
| Responding to enquiries | Legitimate interest |
| Security, fraud prevention, abuse detection | Legitimate interest / legal obligation |
| Analytics and service improvement | Legitimate interest |
05 Cookies
We use the following types of cookies. For full details, see our Cookies Policy.
| Type | Purpose |
|---|---|
| Strictly necessary | Session management, authentication, CSRF protection |
| Preference | Remembering your settings |
| Analytics (Cloudflare Web Analytics) | Privacy-preserving aggregate analytics — no personal identifiers |
06 Data retention
- Account data: While your account is active + up to 12 months after closure.
- School listings: While active + up to 24 months after removal.
- Reviews: Until you request deletion or the review is removed.
- Emails and communication: Up to 24 months.
- Legal and financial records: As required by Ugandan law (typically 7 years).
07 Your rights
Under the Uganda Data Protection and Privacy Act, 2019, you have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate or incomplete data.
- Delete your personal data (subject to legal retention requirements).
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Data portability — receive your data in a structured, machine-readable format.
- Lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
08 Data security
- HTTPS encryption for all site traffic (via Cloudflare).
- Hashed passwords (never stored in plain text).
- CSRF protection and rate limiting on sensitive endpoints.
- Two-factor authentication for administrative access.
- Regular security updates and backups.
09 Children's privacy
SchoolNest is not intended for use by children under 18 without parental supervision. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10 Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email. Continued use of the service after changes take effect constitutes acceptance.
11 Complaints
If you are unhappy with how we handle your personal data, please contact us first at [email protected]. You also have the right to lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda at pdpo.go.ug.
12 Contact
SchoolNest — Data Controller
Send data requests to this address