How school data is handled

Who is responsible for what

Each school decides what personal data it records about its learners, guardians and staff, and why. In the language of Kenya's Data Protection Act, 2019, the school is the data controller and LastWaveEdu processes the data on the school's behalf, to provide the service the school uses.

What the platform holds

Learner records the school enters (names, dates of birth, admission and assessment numbers, class, guardians' contacts), attendance, marks and report cards, and records of pastoral care. Staff accounts with names, email addresses and their roles at the school.

Medical and special-needs details, and counselling notes, are kept apart and are visible only to the roles the school allows. Opening them is recorded.

How it's protected

Each school's records are isolated in the database itself. Every person signs in with their own account, and what they can see and do follows their roles. Changes are recorded in an audit log the school can read. Data travels over encrypted connections.

Messages to guardians

If a school turns on absence SMS, the guardian's phone number and a short message are sent to our SMS provider to deliver it. Nothing is sent unless the school chooses to.

This website

This site doesn't use advertising trackers. If you contact us on WhatsApp or by phone, we use what you tell us only to reply and to discuss LastWaveEdu with you.

Your rights

Learners, guardians and staff can ask their school to see or correct their data, or to have it deleted. The school corrects records in LastWaveEdu, and we help with anything it can't do itself. To ask us anything about privacy, contact us on WhatsApp.