Privacy Policy

1. Introduction

NIBS Technical College ("NIBS," "we," "us," or "our") is registered as a Data Controller with Kenya's Office of the Data Protection Commissioner (ODPC) and is committed to protecting your privacy in accordance with the Data Protection Act, 2019, and Article 31 of the Constitution of Kenya. This Privacy Policy explains what personal data we collect through this website (nibs.ac.ke), why we collect it, and the rights you have over it.

2. Information We Collect

Information you provide directly — when you submit our contact form, we collect your name, email address, phone number, subject, and message. This is sent by email to our admissions/enquiries team and is not stored in a database on our servers.

Information collected automatically — like most websites, we use Google Analytics (GA4) to understand how visitors use our site. This collects your IP address (in an anonymized/truncated form), browser and device type, pages visited, and how you arrived at the site (e.g. from a search engine or social media referral).

Rate-limiting data — to prevent abuse of our contact form, we temporarily track the IP address and timestamp of form submissions in memory. This is never written to disk and is automatically cleared whenever the server restarts.

3. How We Use Your Information

• To respond to enquiries submitted through our contact form
• To understand and improve how visitors use our website
• To protect our website and contact form from spam and abuse
• To comply with legal obligations where required

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Cookies & Analytics

Our website uses Google Analytics, which sets cookies to distinguish you from other visitors. Google Analytics data is processed by Google LLC and may be transferred to and stored on servers outside Kenya, including in the United States, under Google's own data protection safeguards. You can opt out of Google Analytics tracking using browser extensions such as Google's official opt-out add-on, or by disabling cookies in your browser settings.

5. Third-Party Services

We use the following third-party services, each governed by its own privacy policy:

• Google Analytics — website traffic analysis
• Google Workspace (Gmail SMTP) — delivering contact form submissions to our team by email
• External student/staff portals and our admissions portal (admissions.nibs.ac.ke) — each is a separate system with its own privacy practices

6. Data Retention

Contact form submissions exist only as an email in our team's mailbox, retained per our internal email retention practices. Rate-limiting data is held in server memory for a maximum of 24 hours. Google Analytics data is retained according to our configured Google Analytics settings.

7. Your Rights

Under the Data Protection Act, 2019, you have the right to:

• Be informed of the use to which your personal data is to be put
• Access your personal data in our custody
• Request correction or deletion of inaccurate or misleading data
• Object to the processing of your personal data
• Withdraw consent, where processing is based on consent, at any time

8. Data Security

We protect data in transit with HTTPS encryption, and our contact form is protected by rate limiting, spam-bot detection, and input validation. Read more about our specific practices on our Data Protection page.

9. Children's Privacy

Our website is intended for prospective students, parents/guardians, and the general public. We do not knowingly collect personal data from children without the involvement of a parent or guardian.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact Us

For questions about this policy or to exercise your data protection rights, contact us at our contact page or email info@nibs.ac.ke.