Privacy Policy

1. Introduction

Rongeka Africa ("we," "our," or "us") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our school management platform.

2. Data Controller

Rongeka Africa acts as a data processor for schools using the Platform. Each school is the data controller responsible for the personal data of their students, parents, and staff.

3. Information We Collect

3.1 School Information

• School name, code, and address
• Contact email and phone number
• School logo and branding
• Administrator account details

3.2 Student Information

• Full name, date of birth, and gender
• Student registration number
• Class and level information
• Attendance records
• Academic performance and assessment results
• Fee payment records
• Medical information (if provided)
• Guardian/parent contact information

3.3 Staff Information

• Teacher and staff names
• Contact information
• Role and subject assignments
• Employment records

3.4 Technical Information

• IP addresses and device information
• Browser type and version
• Usage data and analytics
• Log files and error reports

4. How We Use Information

We use collected information to:

• Provide and maintain the Platform services
• Process student records and attendance
• Generate reports and analytics
• Send notifications and communications to parents
• Process fee payments and financial transactions
• Improve and optimize Platform performance
• Ensure security and prevent fraud
• Comply with legal obligations

5. Legal Basis for Processing (Zimbabwe DPA Compliance)

We process personal data based on:

• Consent: Schools obtain consent from parents/guardians for student data processing
• Contract: Processing necessary for service delivery to schools
• Legal Obligation: Compliance with education and data protection laws
• Legitimate Interest: Service improvement and security measures

6. Data Sharing and Disclosure

6.1 We Do Not Sell Data

We do not sell, rent, or trade personal data to third parties for marketing purposes.

6.2 Service Providers

We may share data with trusted service providers who assist in:

• Cloud hosting and storage
• SMS and WhatsApp messaging services
• Payment processing
• Technical support and maintenance

6.3 Legal Requirements

We may disclose data when required by law or to:

• Comply with legal processes
• Protect rights and safety
• Prevent fraud or security threats

7. Data Security

We implement robust security measures including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and updates
• Backup and disaster recovery procedures
• Staff training on data protection

8. Data Retention

8.1. We retain personal data only as long as necessary for the purposes outlined in this policy.
8.2. Schools control retention periods for student and staff data.
8.3. Upon account termination, schools have 30 days to export their data.
8.4. After 30 days, data may be permanently deleted unless legally required to retain.

9. Data Subject Rights (Zimbabwe DPA)

Under Zimbabwe's Data Protection Act, individuals have the right to:

• Access: Request copies of their personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of personal data
• Restriction: Limit processing of personal data
• Portability: Receive data in a structured, machine-readable format
• Objection: Object to processing of personal data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact your school administrator or email us at support@rongeka.africa

10. Children's Privacy

Our Platform is designed for schools to manage student data. Schools are responsible for obtaining appropriate parental consent before collecting and processing children's personal data in accordance with Zimbabwe law.

11. International Data Transfers

Data is primarily stored and processed within Zimbabwe or approved Zimbabwean data centers. Any international transfers comply with Zimbabwe Data Protection Act requirements and include appropriate safeguards.

12. Cookies and Tracking

We use essential cookies to:

• Maintain user sessions
• Remember user preferences
• Ensure security
• Analyze Platform usage (anonymized)

You can control cookies through your browser settings.

13. Changes to Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Platform after changes constitutes acceptance.

14. Data Protection Officer (DPO)

For data protection inquiries or to exercise your rights, contact our Data Protection Officer:
Email: support@rongeka.africa

15. Complaints

If you have concerns about how we handle personal data, you may file a complaint with:
Zimbabwe Data Protection Authority
Or contact us directly at support@rongeka.africa

16. Contact Us

For questions about this Privacy Policy or our data practices:
Email: support@rongeka.africa