Winwood College: Data Protection and Privacy Policy

Effective: August 2026

Our commitment

Winwood College respects the privacy of students, parents, guardians, employees, applicants and website visitors. We process personal information fairly, lawfully, transparently and only for clear school-related purposes, in accordance with Zimbabwe’s Cyber and Data Protection Act, 2021 and applicable regulations.

Information we may collect

Depending on your relationship with the College, this may include names, contact details, identity documents, student photographs, educational records, application information, payment evidence, communications and limited technical information required to operate and secure our website. Because our services involve children, parent or legal-guardian authority is required where applicable.

Why we use information

We use information to manage enquiries and admissions, deliver education and student support, communicate with families, maintain safety and school records, process payments, meet legal obligations and protect our systems. We collect only information reasonably necessary for these purposes and retain it only for as long as required by law or legitimate school operations.

Sharing and international services

Information is available only to authorised staff and approved service providers who need it for the stated purpose. We do not sell personal information. Where an approved technology provider processes information outside Zimbabwe, the College will assess the safeguards required by law and use appropriate contractual and security measures.

Security

We use reasonable organisational and technical safeguards to protect information against loss, unauthorised access, alteration or disclosure. No online system is completely risk-free; suspected privacy or security incidents should be reported promptly using the contact details below.

Your choices and rights

You may ask how your information is used, request access, object to certain processing, or request correction or deletion of false or misleading information. Consent may be withdrawn where consent is the basis for processing, although legal or school-record obligations may still apply. A parent or legal guardian may exercise these rights for a child.

Website services

The website uses essential storage for security and visitor preferences. Optional third-party content, including an embedded social-media feed, is not loaded unless the visitor permits optional services. Following a link to WhatsApp, Facebook or another platform means that platform’s own privacy terms apply.

Contact and complaints

Send data-protection questions or requests to info@winwoodcollege.co.zw, call the College, or write to Winwood College, 3794 Shumba Road, Old Windsor Park, Ruwa, Harare. You may also raise a concern with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), Zimbabwe’s Data Protection Authority.

This notice may be updated when our practices or legal duties change.