Information governance

    Privacy policy

    This policy describes the categories of information that may be handled through the website, why it may be used, how it is protected, and how to raise a privacy question.

    Effective
    21 February 2026
    Next review
    21 February 2027
    Document owner
    Embu College

    7 sections · reference copy

    01

    Who this policy is for

    This policy applies to visitors, prospective students, current students, graduates, staff, partners, and other people who interact with Embu College through this website. It should be read alongside any notice shown on a specific form or service.

    02

    Information we may receive

    The information we receive depends on the service you use and what you choose to provide. It may include contact details, admissions or enquiry information, course interests, messages, resource requests, uploaded files, and records of communications.

    • Technical information such as browser, device, approximate usage, and security logs needed to operate and protect the website.
    • Accessibility preferences saved locally in your browser when you use the accessibility settings control.
    • Information provided to an external service when you follow a link and submit information there; that service’s privacy notice will apply.
    03

    Why information is used

    Information may be used to respond to enquiries, process admissions communication, provide requested resources, support students, manage communications, improve website content, understand usage, maintain security, and meet administrative or legal obligations.

    • We aim to collect and use information that is relevant to the interaction and avoid asking for unnecessary details.
    • We may use service providers to host, store, deliver, analyse, or secure parts of the website, subject to appropriate responsibilities.
    • We do not use this page to promise that every external service follows the same practices; review the notice for that service.
    04

    Sharing information and service providers

    Information may be accessed by authorised Embu College staff and by providers who help operate website services, such as hosting, communications, forms, analytics, security, or records management. Access should be limited to the purpose for which the information is needed. We may also disclose information where necessary to protect people or systems, respond to a valid request, or meet an applicable obligation.

    • A provider acting for Embu College should use information only in line with the service it is providing and its agreed responsibilities.
    • When you choose an independent third-party service, that organisation is responsible for explaining how it handles your information.
    • We do not sell personal information submitted through this website.
    05

    Storage, retention, and security

    We use reasonable administrative and technical measures appropriate to the service to protect information from unauthorised access, loss, misuse, or alteration. Retention depends on the purpose, the type of record, operational needs, and applicable requirements.

    • No online transmission or storage system can be guaranteed completely secure.
    • Keep account, form, and contact information accurate and avoid sending sensitive information through an unsuitable channel.
    • We may retain records long enough to respond, provide a service, resolve a dispute, maintain security, or meet an obligation.
    06

    Your questions and choices

    You may contact Embu College with a question about information you submitted, a correction request, a request for a copy where applicable, or a concern about how a service handled your information. We may need enough detail to identify the interaction and protect information from being disclosed to the wrong person. We may also need to keep a limited record of the request and our response.

    • Tell us which form, page, service, or communication your request concerns and provide a safe way to contact you.
    • Use the contact details below rather than posting personal information publicly on social media or a public website area.
    • A request may be affected by legal, security, records-management, or third-party obligations; we will explain the next step where that happens.
    07

    Updates and contact

    This policy may be updated when our services, providers, or applicable requirements change. For privacy questions, contact info@embucollege.ac.ke, embucollege@yahoo.co.uk, or use the Contact Us page.

    Related resources

    Need help with this policy?

    Questions, correction requests, and support needs can be sent to info@embucollege.ac.ke or embucollege@yahoo.co.uk.

    Privacy Policy | Embu College