Privacy Policy

SALBA MONTESSORI INTERNATIONAL SCHOOL (“the School”, “we”, “us”) is the data controller for the personal information described in this notice. Our registered address is No.4 Crown Flower Street. Nsunfa-Sowutuom Accra- Ghana.. The School is registered with the National Schools Inspectorate Authority (NaSIA) and recognised by the Ghana Education Service (GES).

Our Data Protection Officer (DPO) can be reached at [DPO_EMAIL] or by writing to the address above marked “Data Protection Officer”.

Depending on your relationship with the School, we may collect:

• Pupil information: name, date of birth, photograph, nationality, medical and dietary information, academic records, attendance, disciplinary records.
• Parent/Guardian information: name, contact details, identification documents, occupation, relationship to the pupil, emergency contact details.
• Applicant information: data submitted through our admissions form including supporting documents (birth certificate, school reports, photograph).
• Website visitor information: IP address, browser type, pages visited, and (with consent) cookies used to remember preferences.
• Inquiry data: name, email, phone number and message content when you submit our contact form.

We process personal data on the following legal bases under Ghana’s Data Protection Act 2012 (Act 843):

• Contractual necessity — to provide educational services to enrolled pupils.
• Legal obligation — to comply with GES, NaSIA and tax/regulatory reporting.
• Legitimate interests — running the School safely, security/CCTV, internal record-keeping.
• Consent — for marketing photography, newsletters, and optional cookies. You can withdraw consent at any time.

Pupil records are retained for the duration of enrolment plus a period required by Ghana’s educational and accounting regulations (typically 7 years after a pupil leaves). Application data of unsuccessful applicants is deleted within 12 months. Inquiry submissions are deleted within 24 months. CCTV footage is retained for [30] days unless required for an investigation.

We never sell personal data. We share information only with:

• Government and regulatory bodies (GES, NaSIA) where legally required.
• Approved processors (web hosting, payment, examination boards) under written agreements that meet Act 843 standards.
• Emergency services and medical professionals where there is a genuine risk to the welfare of a pupil.

Under the Data Protection Act 2012 you have the right to:

• Request a copy of the personal data we hold about you (Subject Access Request).
• Have inaccurate data corrected.
• Object to processing or withdraw consent for marketing.
• Request deletion where we no longer have a legal basis to keep the data.
• Lodge a complaint with the Data Protection Commission of Ghana (dataprotection.org.gh).

To exercise any right, email [DPO_EMAIL]. We respond within 30 days.

Most data we hold relates to children. Consent for processing is given by the parent or legal guardian. We apply the principle of the best interests of the child and follow the Children’s Act 1998 (Act 560) when handling pupil data.

We use TLS encryption for all forms, hashed passwords, role-based access controls for staff, and regular backups. Our admin systems are restricted to authorised personnel. We will notify affected parents and the Data Protection Commission within 72 hours of any breach involving high risk to data subjects.

Some of our service providers (e.g. cloud hosting, examination boards) may process data outside Ghana. We ensure these transfers happen only to jurisdictions with adequate protection or under contractual safeguards equivalent to Act 843.

We will publish any material changes here and notify enrolled families directly. The effective date at the top of this page reflects the latest revision.