NHS Online School emblemNHS Online SchoolEstablished 2010

Privacy

Privacy Policy

NHS Online School handles learner information because premium education requires trust, discretion and clear accountability.

Effective: 8 October 2026

1. Scope

This policy applies to NHS websites, admissions, Cambridge programmes, bridge enrolment and school-transition support, learner and parent portals, E-Library, communications, assessments, payment records, recruitment, sports/community activities, trips and related services.

2. Information we may collect

Depending on the service, we may collect names, contact details, learner age or grade, current/previous school, curriculum information, parent or guardian details, selected subjects, attendance, assignments, assessment scores, teacher feedback, syllabus coverage, learning targets, messages, invoices, payment references, support requests and account activity.

Where reasonably necessary, we may also process submitted work, recordings, photographs, transfer documents, identification or health/emergency information for a specific activity or trip.

3. Children's and learner data

Many NHS users are minors, so learner information is treated with additional care. Parents or lawful guardians generally manage enrolment and permissions for minors and may exercise relevant data rights on their behalf. We aim to collect only information reasonably necessary for education, administration, safeguarding, transfer support and legal obligations.

4. Why we use information

We use personal information to process applications, deliver teaching, plan cohorts, match teachers, manage timetables, track attendance and progress, mark work, generate reports, support school transfers, provide E-Library access, communicate with families, administer payments, safeguard learners and improve programmes.

5. School-transfer and handover records

Where a family requests support moving to another school, NHS may prepare and share relevant academic records such as attendance, teacher reports, assessment history and syllabus coverage. We will normally share identifiable learner records with a receiving school only with parent/guardian authority or another lawful basis.

6. Sports, community activities and trips

For optional activities, NHS may share the minimum necessary information with a confirmed provider, venue, transport provider or activity coordinator. This may include learner name, age group, emergency contact or relevant safety information. Additional consent may be requested where appropriate.

7. Communications and recordings

Platform messages, announcements and support communications may be retained as part of the learner or account history. Live lessons may be recorded where appropriate for catch-up, teaching quality or safeguarding. Access is controlled and unauthorised distribution is prohibited.

8. Service providers

NHS uses selected technology and service providers for hosting, databases, authentication, email, file storage, video classes, analytics, recruitment forms, payments and other operational functions. Providers receive only the information reasonably necessary to perform their function and may operate infrastructure outside Kenya.

9. Payments

NHS may store invoice details, payment status, transaction references and reconciliation information. Full card credentials or mobile-money security credentials should be handled by the relevant authorised payment provider rather than stored in the NHS learning platform.

10. E-Library and public website

Public visitors may browse selected resources without an account. Some resources require registration or active enrolment. We may collect limited technical information such as page requests, downloads, device/browser information and security logs to operate and improve the service.

11. Recruitment

Teacher and staff applicants may provide qualifications, work history, references, identification or supporting documents. Recruitment applications may be collected through an external form provider as well as NHS systems.

12. Security

We use role-based access, authenticated accounts, database permissions and reasonable administrative and technical measures to limit access. No internet service can promise absolute security, so users should protect passwords and report suspected compromise promptly.

13. Retention

We retain information for as long as reasonably necessary for the educational relationship, learner records, safeguarding, financial administration, transfer support, dispute resolution, legal obligations and legitimate school operations. Data no longer required should be deleted, anonymised or securely archived according to its purpose.

14. Your rights

Subject to applicable law, individuals may request information about how their data is used, access personal data held about them, request correction, object to certain processing or request deletion where appropriate. For minors, these rights may be exercised by a person with parental authority or a lawful guardian.

15. Kenyan data-protection framework

NHS intends to process personal information in accordance with the Kenya Data Protection Act, 2019 and applicable regulations and guidance, including principles of lawful, fair, transparent, purpose-limited and secure processing.

16. Contact

Privacy requests or concerns can be sent to info@homeschool.co.ke. Please use “Privacy Request” in the subject line.