Legal

Privacy Policy

Version 2026.05.18. This page explains data collection, handling, retention, and compliance responsibilities.

Data Handling and Compliance

ScholarBase Privacy Policy (Version 2026.05.18)


1. Data Collected:

Onboarding data, school profile information, account metadata, legal acceptance metadata, and operational platform records required for service delivery.


2. Purpose of Processing:

To provide onboarding, account setup, communication, security monitoring, support operations, and compliance/audit evidence.


3. Legal Acceptance Evidence:

Terms and Privacy acceptance details are retained with timestamp, IP/user-agent metadata, version numbers, and downloadable legal snapshot records.


4. Data Integrity and Access:

Reasonable controls are applied by the service provider. Schools remain responsible for lawful internal access controls, correctness of submitted records, and role governance.


5. Retention:

Compliance and legal records may be retained for evidentiary and audit purposes according to business, legal, and regulatory requirements.


6. Zimbabwe Context:

Data handling is designed with reference to Zimbabwe privacy and cyber-data obligations, including the Cyber and Data Protection Act [Chapter 12:07], plus relevant education-sector obligations.