MORNING STAR CHRISTIAN ACADEMY
Effective Date: 5 November 2026
1. Introduction
Morning Star Christian Academy (MSCA) is committed to protecting the personal information of its learners, parents and legal guardians, employees and other individuals it interacts with. This Privacy Notice explains how we collect, use, store and share personal information in accordance with the Constitution of Zimbabwe, the Cyber and Data Protection Act [Chapter 12:07], the Education Act [Chapter 25:04] and any other applicable laws of Zimbabwe.
2. Information We Collect
Depending on your relationship with MSCA, we may collect:
• Learners:
Names, dates of birth, contact details, academic and attendance records, photographs, medical information and emergency contact details.
• Parents and legal guardians:
Names, contact details, identification details and information relating to enrolment, legal guardianship and school fees.
• Employees and applicants:
Contact details, qualifications, employment records, payroll information and other information necessary for employment administration.
• Visitors and service providers:
Identification and contact details, and other information necessary for security and the management of our relationship with them.
3. How We Use Personal Information
We collect information directly from individuals, through admission and employment forms, communications, MSCA activities, online platforms and other lawful sources.
We use personal information to:
• administer admissions, enrolment and educational activities;
• maintain academic, attendance and employment records;
• communicate with parents, learners and staff;
• manage school fees and other financial matters;
• support learners' health, welfare and emergency care;
• organise sporting events, educational trips and related transport;
• provide online classroom and homework platforms;
• protect the safety and welfare of learners and staff; and
• fulfil legal and regulatory obligations.
We process personal information on an applicable lawful basis permitted by law, which may include consent, contractual necessity, compliance with legal obligations or other lawful grounds.
4. Children's Information and Photographs
MSCA takes particular care when processing children's personal information.
Photographs and video recordings may be taken during MSCA events and activities for record-keeping, MSCA communications, and publicity. These may be published on MSCA's official website, official social media channels (including but not limited to Instagram, Facebook, and LinkedIn), and any other promotional media.
MSCA obtains consent from parents or legal guardians for the use of learners' photographs for publicity purposes. MSCA will use photographs and recordings appropriately and take reasonable steps to protect learners' privacy.
Parents and legal guardians may contact MSCA's Data Protection Officer regarding questions, concerns or changes to their photography consent preferences.
5. Medical Information and Learner Welfare
MSCA may collect medical information where necessary to support learners' health, safety and welfare, respond to emergencies and make appropriate arrangements during MSCA activities, sporting events and educational trips.
Access to medical information will be restricted to authorised persons who require it for legitimate purposes.
6. Online Learning and MSCA Transport
MSCA uses an online classroom platform to support learning, including the distribution and submission of homework and related educational activities. Personal information may be processed through the platform and its service providers for these purposes.
MSCA may also process learner information necessary to organise transport for sporting events, educational trips and other MSCA activities, including information required for attendance, coordination and emergency contact purposes.
Where external service providers process personal information on MSCA’s behalf, appropriate confidentiality and data protection measures will be implemented.
7. Sharing Personal Information
MSCA may share personal information, where necessary and lawful, with authorised staff, parents or legal guardians where appropriate, educational and government authorities, healthcare providers, payment service providers and third-party service providers supporting MSCA operations.
MSCA may also collaborate with other schools and educational institutions in connection with sporting activities, academic programmes, competitions, educational trips and other school-related activities. Where necessary and lawful, relevant personal information may be shared to facilitate these activities.
Where another school or organisation processes personal information on MSCA’s behalf, the MSCA will put appropriate data processing agreements in place. Where organisations share information while acting independently, appropriate arrangements will be established to govern the sharing and protection of that information.
MSCA will take reasonable steps to ensure that such arrangements provide for the appropriate protection, confidentiality and security of personal information. MSCA will maintain an updated list of relevant partner schools and organisations, where appropriate, and make it available upon request, subject to applicable confidentiality and data protection requirements.
Where personal information is transferred outside Zimbabwe, MSCA will comply with applicable legal requirements.
8. Storage, Security and Retention
MSCA takes reasonable technical and organisational measures to protect personal information against loss, unauthorised access, disclosure or misuse.
Personal information is retained only for as long as necessary for its intended purpose or as required by law. When information is no longer required, appropriate steps will be taken to securely delete, destroy or anonymise it.
9. Your Rights
Subject to applicable law, individuals may request access to their personal information, request correction of inaccurate information, object to certain processing, request deletion where legally appropriate, withdraw consent where processing is based on consent, and lodge complaints concerning the handling of their information.
Requests concerning a learner's information may be made by a parent, legal guardian or other legally authorised person, subject to applicable law.
10. Contact and Complaints
For questions, requests or complaints concerning personal information, please contact MSCA's Data Protection Officer:
Data Protection Officer: Nanzelelo Ndlovu
Email: [email protected]
Individuals may also lodge complaints with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), in accordance with applicable law.
11. Updates
MSCA may update this Privacy Notice to reflect changes in its practices or applicable legal requirements. The latest version will be available through MSCA office, its website and other social media platforms.
Last Updated: 5 November 2026