Data Protection (DPPA 2019)

This statement describes Wanguza’s data-protection posture in practice today. Our registration with the Personal Data Protection Office (PDPO) at NITA-U is in progress, and this page will be updated when it completes.

Controller and processor roles

For parent and pupil data collected through Wanguza, the school is the data controllerand Wanguza is a data processor acting on the school’s documented instructions. We provide a data-processing arrangement to schools on request.

Principles we follow

• Consent-first: granular, unbundled opt-in captured at the point of collection; parents choose exactly what they agree to.
• Purpose limitation: data is used only for the enrollment purposes the parent consented to.
• Data minimisation: we collect only what a school needs to manage enrollment.
• Security: encryption in transit, per-school isolation, access control, and audit logging.
• Rights: access, correction, and deletion are supported, including self-service tools.

Parents’ rights

Parents may withdraw consent at any time (e.g. reply STOP to messages), request a copy of their data, ask for corrections, or request deletion. Schools using Wanguza offer self-service “manage my data” and “delete my data” options on their microsites.

Payments

Payment details are handled by a licensed payment processor and settle directly to the school. Wanguza does not store card or mobile-money credentials.

Contact

Data-protection enquiries: hello@wanguza.com. See also our Privacy Policy.