Privacy Policy

1. Introduction

St. Paul's Mutolere Secondary School ("the School") is committed to protecting the privacy and personal data of our students, parents, staff, alumni, and website visitors. This privacy policy outlines how we collect, store, process, and protect personal data in compliance with **Uganda's Data Protection and Privacy Act, 2019 (as amended)**.

2. Principles of Data Protection

In accordance with section 3 of the Act, we ensure that personal data is:

• Processed lawfully, fairly, and in a transparent manner.
• Collected for specified, explicit, and legitimate academic or administrative purposes.
• Adequate, relevant, and limited to what is necessary for processing.
• Accurate and kept up to date.
• Kept in a form that permits identification of data subjects for no longer than necessary.
• Processed securely using appropriate technical and organizational measures.

3. Data We Collect

We collect personal data through our website forms, specifically:

• Alumni Registration: Full name, graduation year, house, current occupation, email address, and phone/WhatsApp number.
• Admissions Portal: Applicant details, parent/guardian contacts, academic records, and identification information.
• Cookies & Analytics: Minimal anonymous IP addresses and device usage details to improve browser loading performance.

4. Purpose of Data Processing

We process your personal information for the following legitimate purposes:

• To verify applicant status and coordinate admission requests.
• To maintain and update our official school alumni database and network.
• To communicate circulars, newsletters, reunions, and school development updates.
• To fulfill statutory reporting requirements to the Ministry of Education and Sports.

5. Rights of the Data Subject

Under Part V of Uganda's Data Protection and Privacy Act, 2019, you have the right to:

• Right to Access: Request copies of your personal data held by the school.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure / Objection: Request deletion of your personal data where there is no legal basis for its retention.
• Right to Prevent Processing: Object to processing for direct marketing or unauthorized third-party transfers.

6. Data Sharing and Transfers

We do not sell, rent, or lease your personal data. We only share information with third parties (such as UNEB, Ministry of Education, or ICT infrastructure partners) where required by law, necessary to provide services, or with your explicit consent.

7. Data Officer Contact

For inquiries, data correction requests, or complaints regarding how we handle your personal information, please contact our Data Protection Officer:

The Data Protection Officer
St. Paul's Mutolere Secondary School
P.O Box 12, Kisoro, Uganda
Email: privacy@mutolere.sc.ug