1. Introduction & Overview

This Data Privacy Policy applies to all users of the Everlasting Academy Online Result System, including students, parents, and authorised school staff. By using the system, you consent to the practices described in this policy.

This policy is reviewed regularly to ensure compliance with Tanzanian data protection laws and international best practices.

2. What Data We Collect

To provide accurate academic results and secure access, we process the following categories of personal data:

• Student identification — full name, registration number, class/stream, and student ID.
• Contact details — email address and phone number for notifications and account recovery.
• Academic records — examination scores, grades, transcripts, and attendance history.
• System usage logs — login timestamps, IP addresses, and browser type for security auditing.

Important We never collect sensitive data such as financial information or biometrics.

3. How We Use Your Data

• To display your results and academic progress securely.
• To generate official transcripts and report cards.
• To send important notifications (exam schedules, result releases, and system updates).
• To maintain audit trails for compliance and dispute resolution.
• To improve our platform through anonymous analytics.

4. Security Measures

We implement industry‑standard safeguards to protect your data:

• 256‑bit SSL encryption for all data in transit.
• Role‑based access control — only authorised staff can view sensitive records.
• Automated session timeouts and inactivity locks.
• Regular security audits and vulnerability assessments.
• Encrypted backups stored in secure, offline locations.

In the event of a data breach, we will notify affected users and the relevant authorities within 72 hours as required by law.

5. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined above, or as required by Tanzanian educational regulations.

• Student records are kept for 5 years after graduation for reference and certification.
• You may request deletion of your data after this period, subject to legal obligations.

6. Your Rights

Under the Tanzanian Data Protection Act and international best practices, you have the right to:

• Access — view all personal data we hold about you.
• Rectify — correct any inaccurate or incomplete data.
• Delete — request erasure of your data (where legally permissible).
• Restrict — object to processing under certain circumstances.
• Portability — receive your data in a structured, machine‑readable format.

To exercise any of these rights, please contact our Data Protection Officer at everlastingacademy24@gmail.com.

7. Cookies & Tracking

We use only essential cookies to maintain your session and preferences. No third‑party tracking or advertising cookies are employed. You can disable cookies in your browser settings, but this may affect portal functionality.

8. Third‑Party Sharing

We never sell or rent your personal data. We may share data with:

• Educational authorities (NECTA, Ministry of Education) for official verification.
• Trusted service providers (hosting, email delivery) who are bound by strict confidentiality agreements.

All third‑parties are GDPR‑compliant and located within secure jurisdictions.

9. Policy Updates

We may revise this policy to reflect changes in law or our practices. The latest version will always be available on this page, with the effective date noted below.