Privacy At a Glance
For Parents, Teachers & Admins - Your data protection simplified
Privacy At a Glance (for Parents, Teachers & Admins)
- We never sell or trade your data.
- Only essential information is collected.
- All data is encrypted and securely stored.
- Student data is collected only with parental consent.
- Parents, teachers, and admins can access, correct, or delete their data anytime.
- If a breach occurs, we notify affected users within 72 hours.
Our Commitment to Privacy
HaliSpace operates with a zero-tolerance policy for data misuse. We never sell, rent, or monetize personal information.
We comply with:
Global standards:
GDPR, COPPA, FERPA
African laws:
Kenya Data Protection Act (2019), Nigeria NDPR (2019), South Africa POPIA (2013)
Regulators:
- Kenya: Office of the Data Protection Commissioner (ODPC)
- Nigeria: Nigeria Data Protection Commission (NDPC)
- South Africa: Information Regulator (South Africa)
Where required, we use local in-country hosting (e.g., under NDPR).
Information We Collect and Why
| User Group | Data Collected | Purpose | Retention |
|---|---|---|---|
| Parents | Name, email, phone, communication preferences | To send updates about children, enable two-way school communication | Deleted within 30 days of account closure |
| Teachers | Name, email, phone, verified role/school credentials | To verify identity, enable classroom communication, provide access to dashboards | Deleted within 30 days of deactivation |
| Administrators | Name, email, phone, verified school affiliation, role permissions | To manage platform accounts, enable role-based access, ensure school-wide oversight | Deleted within 30 days of deactivation |
| Students (with parental consent) | Academic records, health info (emergency only), progress reports | To support learning, safety, and educational progress | Retained according to school policy; securely deleted or anonymized when no longer required |
Minimal Data Principle
No advertising profiles. No unnecessary tracking.
Consent
- Parents: Must provide explicit consent before student data is collected or shared.
- Teachers/Admins: Consent is obtained during onboarding and verified by the school.
- Consent may be withdrawn anytime by contacting HaliSpace or the school.
How We Use Data
For parents, teachers, admins, and students, data is used only to:
- Enable secure communication.
- Provide and improve services.
- Send important updates.
- Protect security.
- Meet regulatory/legal obligations.
Third-Party Service Providers
We work with trusted partners for:
- Cloud hosting (secure servers).
- SMS/email delivery.
- Analytics (aggregate usage only).
All vendors are contractually bound to confidentiality, cannot use data for their own purposes, and undergo security vetting.
Security You Can Trust
AES-256 encryption
Zero-trust architecture
24/7 monitoring & intrusion detection
Annual third-party audits (ISO 27001, SOC 2 Type II)
Role-based access for parents, teachers, and admins
Redundant backups across secure data centers
Data Breach Protocol
If a breach occurs:
- Investigate & contain within 24 hours.
- Notify affected parents, teachers, and admins within 72 hours.
- Report to regulators (ODPC, NDPC, POPIA, GDPR authorities).
- Provide clear user guidance.
Your Rights (Parents, Teachers, Admins)
You may:
- Access your information.
- Correct inaccuracies.
- Request deletion (unless legally required).
- Opt-out of non-essential messages.
- Request data portability (CSV or PDF).
- File complaints with your country's regulator (ODPC, NDPC, Information Regulator SA, etc.).
Data Retention
- Parents/teachers/admins: Records deleted within 30 days of deactivation.
- Students: Records follow school retention policies; deleted or anonymized when no longer needed.
International Transfers
Data may be processed across regions. Safeguards include:
- Local hosting where required (e.g., Nigeria NDPR).
- Standard contractual clauses for transfers under GDPR.
- Full compliance with African and global laws.
Policy Review & Updates
Reviewed annually and updated immediately when laws or practices change. Major updates are communicated via the platform or email.
Contact Us
For all privacy inquiries: contact@halispace.io