Updated in July 2025
Introduction
SABIS® International School – Runda, Kenya (collectively referred to as the “School”, “we”, “us”, “our”, or “ours”) values and takes your privacy rights seriously. We are committed to being transparent about the data we collect about you, how it is used, and with whom it is shared as set forth herein.
This Privacy Policy (the “Policy") applies to the data collected from all users of the sabisrunda.sabis.net website (the “Website”) and the services available on the Website (the “Services”).
The recipient and controller of the data are:
SABIS® International School – Runda, Kenya
Situated off Kiambu Road after the Northern Bypass Underpass
Po. Box: 111-00627, Two Rivers, Nairobi, Kenya. Phone. +254 743 162 670.
Questions, comments, and requests regarding this Policy: privacy@sabis.net
The terms “you,” “your,” and “yours” refer to the user or viewer of the Website / Services, as applicable.
This Policy, together with our Terms & Conditions, sets out the basis on which any Personal Data we may collect about you, or that you choose to provide to us, and your choices and rights regarding our use of your Personal Data. It also explains the purpose of processing your data and how we keep it safe. Please read the following sections carefully to understand our views and practices regarding your Personal Data and how we handle it.
We reserve the right to make changes periodically to this Policy at our sole discretion. Changes to the Privacy Policy will be posted on this page.
Definitions
Personal Data: any information relating to an identified or identifiable natural person.
Data Subject: an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person, and whose Personal Data is being collected, held or processed.
Processing: Any operation performed upon Personal Data, including but not limited to collection, storage, use, erasure, recording, disclosure, transmission, alteration, distribution, etc.
Information Collected on Our Website
The type of Personal Data the School collects about prospective students, students, and parents and/or guardians (‘Parents’) before, during, and after the course of a student's enrolment at the School, as well as other individuals/visitors who come into contact with the School includes the following:
- Contact Details (e.g. name, address, E-mail address, phone number)
- Content Data (e.g. text input)
The School collects the Personal Data held about a Data Subject through the “Plan a Visit” form or other forms filled out by Parents, essential to process your application and to contact you.
Occasionally, visitors submit their Personal Data through the "Contact Us" form on the Website. The required details are necessary for contacting the Website visitors and processing their inquiries.
This Policy also applies to Personal Data we collect from you via the use of cookies and related technologies to maintain an anonymized user's session, and to provide users with personalized web pages. You can control how you use cookies by adjusting the settings within your browser. For further information, please see our “Cookies Policy.”
Use of Google Analytics
The Website uses Google Analytics – a web analytics service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. (“Google”) – to generate reports on the Website activities, which help us improve our services using active IP anonymization.
For more information about Google Analytics cookies, access the following link: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
To opt-out of Google Analytics (relating to your use of our Website), you can adjust your cookies settings, or you can download and install the Browser Plugin available by visiting: https://tools.google.com/dlpage/gaoptout?hl=en
Children’s Privacy
We place great importance on protecting the privacy of young children who may use the Website. We do not knowingly solicit or collect Personal Data from individuals under the minimum age required by applicable laws. To use our Services, you must be of the age of majority in your jurisdiction. Individuals under this age may only use our Services under the supervision and with the involvement of a parent or legal guardian.
If you are a parent or legal guardian and believe that your child has provided us with Personal Data without your consent, you may contact us at privacy@sabis.net. You have the right to exercise all applicable data protection rights on behalf of your child, including the right to request access to, receive a copy of, or request the deletion of any Personal Data submitted.
Purpose of Data Collection
Any of the information we collect from you may be used in the following ways:
1. Information You Give to Us Voluntarily and the Purpose of Its Collection
Plan A Visit/ Schedule a Meeting Form (Form): The Personal Data submitted via such form will be used to schedule and manage visitor appointments, communicate relevant details, and ensure safety during visits to the School’s premises.
Contact Us Form: The Personal Data submitted via the Contact Us form will be used to respond to inquiries and provide assistance. The purpose of collecting this data is to ensure effective communication and address the specific requests or concerns submitted.
2. Information We Collect Automatically About You
The Personal Data collected automatically through cookies or the web server logs is used to ensure that content from our Website is presented in the most effective manner for you. This data is also used to administer our Website and perform internal statistical and trend analysis to improve the user experience and performance of our Website.
No automated or profiling-based decision-making would be performed.
Data Security
We will securely process (collect, store, and use) your Personal Data.
We have implemented administrative, technical, and physical security measures to help prevent accidental or unlawful destruction or loss, alteration, unauthorized disclosure, or access. Despite these measures, no data transmission over the Internet can be entirely secure, and we cannot guarantee or warrant the security of any information you transmit via our Website.
We take appropriate steps to restrict access to Personal Data to authorized employees and agents who require it for the operation, development, improvement, or delivery of our programs, products, and services. This is accomplished through Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA), as well as logging and auditing, among other security measures.
We value the security of your Personal Data collected for the purposes mentioned above, and we confirm that we will apply acceptable security measures and procedures to ensure the confidentiality, integrity, and availability of the Data.
Links to Our Social Media Portals
We maintain an online presence on social media networks and platforms in order to communicate with users and interested parties and inform them about our services.
With that, your Personal Data may be processed beyond your country/geographical region. Depending on the social media provider (Facebook – X, Instagram, Vimeo), it may be that other data processing is performed by them. For details, refer to the terms of use and data privacy policies of the respective social media portals
External Links
Our Website contains links to external websites within the SABIS® Global Network, such as the SABIS® Newsletter. Please refer to the privacy policies of each external site within the SABIS® Global Network to understand how your Personal data is being processed.
Use of Google Maps
We use Google Maps on our Website. Google Maps is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The Google Maps plug-in is included by embedding the service on our Website using what is known as iFrames. When loading these iFrames, under certain circumstances, Google may collect and process information (including Personal Data). We cannot exclude the possibility that Google may also transmit this information to a server in a different country.
We do not collect any data when you use Google Maps through our Website.
The purpose of having Google Maps on our Website is to display our address and make further information available to you by providing access routes to the respective locations; therefore, making it possible for you to plan your journey independently.
Information on Legal frameworks for data transfers and other relevant data on Google’s data processing within the framework of the use of Google services can be found at: https://policies.google.com/privacy and https://policies.google.com/privacy/frameworks.
Personal Data Erasure and Storage Duration
We will endeavor to keep the submitted Personal Data accurate and up-to-date, and not keep it for longer than is necessary to fulfill the purposes outlined in this Policy unless otherwise required by law.
The Personal Data you submit under the “Contact Us” form will be stored in our databases for one year only in an anonymized format and will be automatically deleted afterward.
The Form and any other school event forms (such as event registrations, landing pages, meeting booking pages, etc.) available on our Website (referred to in this Policy as ‘Forms’) are created using the School’s Customer Relationship Management (CRM) web application, which is integrated with the Website. The Personal Data collected from these Forms will be stored in the School CRM’s database for a specified period, starting from the date of submission. This duration is necessary for the purpose of data collection and is detailed in each form's privacy statement, which must be consented to before submitting the form.
We have no impact on the duration for which data held by social network operators is stored for their own purposes. For details please refer directly to the social network operators’ privacy policies.
Personal Data Transfer and Sharing
The School is part of the SABIS® Global Network. Therefore, your Personal Data will be transferred to SABIS Educational Systems, Inc., located in Eden Prairie, Minnesota, USA, which collaborates with the processor Lumen Technologies, Inc., Monroe, Louisiana, USA, which collaborates with the processor Lumen Technologies, Inc., USA, on the provisioning of IT systems. SABIS Educational Systems Inc. maintains our Website and databases where the Personal Data of Data Subjects covered by this Policy is stored and anonymized.
The Personal Data stored in the Website’s database hosted in SABIS Educational Systems, Inc. is backed up locally in the US Data Center and online using the Barracuda Cloud Backup service. The latter is a cloud backup solution that utilizes Azure and Amazon AWS cloud infrastructure in the US.
In addition, authorized employees from SABIS Educational Services S.A.L., based in Adma, Lebanon, may access your Personal Data stored in the CRM web application’s database solely for technical support purposes, further to the School's request.
Disclosure to Third Parties Without Prejudice to the Previous Clause
We do not share your Personal Data collected on this Website with third parties without obtaining your consent. However, we may be required or need to disclose your Personal Data in the following circumstances:
- If we receive a valid request from the police, law enforcement agencies, regulatory bodies, or government authorities in the country of origin or elsewhere.
- We may share your Personal Data with other schools and entities within the SABIS® Network for the sole purpose of providing academic and technical support. Your personal data will not be used for any purpose other than that for which it was originally collected.
- We may share your Personal Data with our service providers in order to provide you with the necessary services. These service providers can be provided upon request and when applicable.
- We may share your data with relevant service providers for contract execution and business development.
Legal Basis for the Processing of Your Personal Data
Our legal basis for processing your Personal Data depends on the purpose for processing and may vary as described in this Policy and the service you are using. In general, we process your Personal Data under the following legal bases:
Your Consent
We process your Personal Data based on your consent when applicable. You may withdraw your consent at any time by contacting us at privacy@sabis.net . Please note that withdrawing your consent will prevent us from continuing to process your Personal Data on that basis; however, it will not affect the lawfulness of any processing carried out prior to the withdrawal.
Legal Obligations
We process your Personal Data as needed to comply with laws and regulations.
Legitimate Interests
We process your Personal Data based on our legitimate interests in order to provide and improve our Services. This includes managing inquiries, supporting enrollment and admission processes, responding to expressions of interest in the School, maintaining communication with data subjects, and ensuring the functionality, development, testing, and security of our systems.
In limited cases, and only with your explicit consent, we may also use your Personal Data for marketing, advertising, or to make recommendations about our products and services.
All such processing is carried out with appropriate safeguards to protect your fundamental rights and freedoms and is strictly limited to the purposes outlined in this Policy.
Data Subject Rights
In certain circumstances, you have certain rights regarding your Personal Data. A summary of each right and how you can exercise it is set out below. To exercise any of these rights, please contact us by sending an e-mail to privacy@sabis.net
- Right of access – You have the right to request a copy of the Personal Data we hold about you.
- Right of rectification – You have the right to ask us to correct inaccurate or incomplete data we hold about you.
- Right to request deletion – In certain circumstances, you can ask for the data we hold about you to be erased from our records.
- Right to restriction of processing – Under certain conditions, you have the right to ask us to restrict the processing of your Personal Data.
- Right of portability – You have the right to have the data we hold about you in a structured, commonly used, and machine-readable format.
- Right to object – You have the right to object to certain types of processing, such as direct marketing.
- Right to object to automated processing, including profiling – Profiling-based activities are not carried out under any circumstances.
- Right to withdraw your consent for Personal Data Processing – You shall inform us of this through any available means in accordance with Law provisions.
- Right to lodge a complaint – If you object to our processing of your Personal Data, you have the right to complain to the Data Protection Authority (DPA) in the country where you reside or the alleged infringement of data protection laws has taken place
Acceptance and Changes to the Policy
By using our Website and Services, you agree to and consent to this Privacy Policy. Any changes we may make to this Policy in the future will be posted on this page.
