Legal

Privacy Policy

How Aurelia Academy collects, uses and protects your personal information.

Data Controller

The Registrar, Aurelia Academy, Marondera, Zimbabwe. In compliance with the Cyber Security and Data Protection Act [Chapter 12:13].

Information we collect

We collect personal information when you register for the portal, submit an admission application or contact us. This includes student and parent/guardian names, contact details, National IDs, birth certificates and academic transcripts.

How we use your information

Your data is used strictly for processing admission applications, ZIMSEC and Cambridge examination registrations, school-to-parent communication (newsletters, reports and fee statements), and statutory reporting required by the Ministry of Primary and Secondary Education.

Who we share data with

We do not sell or rent your data to any third party. Data is shared only with examination bodies (ZIMSEC / Cambridge Assessment International Education) and government authorities as required by law. Staff access is role-restricted and logged.

Data security

We implement industry-standard encryption and secure server protocols. The school management system enforces role-based access controls, and all sensitive operations are recorded in an audit log. Staff with access to student data undergo annual data-protection training.

Retention and deletion

Student records are retained for seven years after a student leaves the school, in line with legal requirements. Parents and former students may request deletion of non-statutory data by writing to the Registrar.

Your rights

You have the right to access your personal data, correct inaccuracies and request deletion where no legal retention obligation applies. Submit requests in writing to the Registrar's office. We will respond within 21 days.

Last updated: January 2025 · Contact us with questions