Privacy notice
What this website collects about you, why, who sees it, and how long it is kept. In plain words.
Last updated
Who we are
Victory Education Centre, Idudi runs this website. The school decides why and how the personal details described here are used, which makes it the data controller under Uganda's Data Protection and Privacy Act, 2019.
For anything in this notice, reach the school office:
- Phone: +256 200 948 827
- Email: info@vec-idudi.sc.ug
- In person or by post: the school office, Idudi Town Council, Bugweri District, Eastern Uganda
What we collect, and why
This site collects as little as it can. You can read every page without telling us anything.
What this website collects
- What
- Your name, your email address, your phone number, the class you ask about and your message
- When
- When you send one of the forms on the Admissions or Contact page
- Why
- To answer you
- How long we keep it
- 12 months, then it is removed. Sooner if you ask
- What
- A scrambled code made from the network address of your device. The address itself is never stored, and the code cannot be turned back into it
- When
- When you send a form
- Why
- To stop one device sending a flood of enquiries
- How long we keep it
- With your enquiry, for the same 12 months. The counter that uses it is cleared after 2 days
- What
- The network address of your device, the pages it asks for, and the time
- When
- On every visit, as on every website
- Why
- So the company that serves this site can deliver the pages and protect the site from attack. We do not use these records to work out who you are
- How long we keep it
- As long as that company keeps its logs, which is a matter of days
- What
- A report of what went wrong: the page, the kind of browser, and the fault. It holds no name and no message you typed
- When
- Only if a page fails while you are using it
- Why
- So we can find the fault and fix it
- How long we keep it
- Up to 90 days
This site sets no cookies for visitors. It has no advertising, it does not follow you to other sites, and it does not count or profile its visitors.
Children
The forms on this site are for parents and guardians. Please do not type a child's name, date of birth, health details or anything else about a child into a form. The school asks for a child's details in person, at admission, and keeps them in its own records, not on this website.
Photographs
A photograph of a child appears on this site only when the school holds the consent of that child's parent or guardian. A photograph of a member of staff appears only with that person's agreement.
If you want a photograph taken down, tell the school office. You do not have to give a reason. We take it down as soon as we can, and always within 30 days.
Who we share it with
We do not sell personal details, and we do not give them to anyone for advertising. The companies below run parts of this site for the school. Each handles the details only to do that job, under its own written data protection terms.
The companies that run parts of this website
- Company
- Vercel Inc.
- What it does for us
- Serves the website to your phone or computer
- Where
- United States. The programs of this site run in Ireland
- Company
- Supabase Inc.
- What it does for us
- Stores the enquiries, the news, the pictures and the staff accounts
- Where
- Ireland, in the European Union
- Company
- Functional Software, Inc. (Sentry)
- What it does for us
- Receives the error reports
- Where
- Germany, in the European Union
- Company
- GitHub, Inc.
- What it does for us
- Holds the code of the site, and an encrypted copy of the database made every night
- Where
- United States
These companies keep the details outside Uganda. The details you send in a form are stored in Ireland, in the European Union, which has strict data protection law of its own. By sending a form you agree to your details being stored there.
We would also hand details over if a court or a law of Uganda required it.
Your rights
You may ask the school, at any time and at no cost:
- what details this website holds about you, and for a copy of them
- to have a detail corrected if it is wrong
- to have your enquiry removed before its time is up
- to have a photograph of you or of your child taken down
- to stop using your details, if you no longer agree to it
Reach the school office in any of the ways above. We act as soon as we can, and always within 30 days. We may ask a question or two first, to be sure the details are yours.
If you are not satisfied with our answer, you may complain to the Personal Data Protection Office of Uganda, at pdpo.go.ug.
Staff who sign in
A few members of staff sign in to this site to keep it up to date. For each of them the site holds their name, their email address, their role, their password in scrambled form, their second sign-in step, and the devices they are signed in on.
The site also keeps a record of every change a member of staff makes. That record is kept permanently, so the school can always tell who changed what. Wrong sign-in tries are counted for 2 days, and a finished sign-in session is kept for 90 days.
How we keep it safe
- Every page travels over an encrypted connection.
- Only named members of staff can read enquiries, each with their own password and a second sign-in step on their phone.
- The database itself refuses any request that the signed-in person's role does not allow.
- The nightly copy of the database is encrypted before it leaves the machine that makes it.
If details were ever exposed, the school would tell the people affected and the Personal Data Protection Office, as the law requires.
Changes to this notice
When this site starts to collect something new, or stops, this notice changes on the same day, and the date at the top changes with it.