Legal
Privacy Policy
Version 2026.05.18. This page explains data collection, handling, retention, and compliance responsibilities.
Data Handling and Compliance
ScholarBase Privacy Policy (Version 2026.05.18)
1. Data Collected:
Onboarding data, school profile information, account metadata, legal acceptance metadata, and operational platform records required for service delivery.
2. Purpose of Processing:
To provide onboarding, account setup, communication, security monitoring, support operations, and compliance/audit evidence.
3. Legal Acceptance Evidence:
Terms and Privacy acceptance details are retained with timestamp, IP/user-agent metadata, version numbers, and downloadable legal snapshot records.
4. Data Integrity and Access:
Reasonable controls are applied by the service provider. Schools remain responsible for lawful internal access controls, correctness of submitted records, and role governance.
5. Retention:
Compliance and legal records may be retained for evidentiary and audit purposes according to business, legal, and regulatory requirements.
6. Zimbabwe Context:
Data handling is designed with reference to Zimbabwe privacy and cyber-data obligations, including the Cyber and Data Protection Act [Chapter 12:07], plus relevant education-sector obligations.