Personal data
Your family’s data, and what we do with it.
A school knows a great deal about a child: their marks, their health, who collects them. This notice explains what we collect, why, who can see it, how long we keep it and how to exercise your rights — under Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data.
Who is responsible
The controller is the direction of Nakhla School. A data-protection contact in the office answers any question about this notice.
Why we process data
- To consider an application and enrol a pupil
- To organise schooling: classes, timetables, marks, report cards, absences
- To communicate with families: messages, appointments, alerts
- To invoice and collect school fees
- To keep children safe: trips, transport, authorised adults, health at the infirmary
On what basis
The schooling contract the family signs, the obligations the Ministry of National Education places on an approved school, and your express consent, collected at enrolment, for anything that is neither: publishing photos, using the assistant and the tutor, optional communications. Consent can be withdrawn at any time in the parents’ space.
Only what is needed
We only ask for what serves one of these purposes. No parents’ occupation, no income, no origin. Health data is limited to what a nurse must know — allergies, current treatment, who to call — and only she and the direction can see it.
Who sees what
Access is set by role and checked by the server on every page: a parent sees only their own children, a teacher only the classes they teach, and each member of the direction only what their job requires.
| Data | Parents | Pupil | Teachers | Direction |
|---|---|---|---|---|
| Marks and report cards | Their own | Their own | Their classes | By role |
| Absences | Their own | Their own | Their classes | By role |
| Health and allergies | Their own | No | No | By role |
| Payments | Their own | No | No | By role |
| Messages | Their own | No | Their own | By role |
| Tutor conversations | Their own | Their own | Their classes | By role |
How long
Data is kept only as long as needed, then deleted or archived as school regulations require.
| Unsuccessful application | 1 year after the decision |
|---|---|
| Pupil’s file | For the time at school, then archived |
| Marks and report cards | Archived, as regulations require |
| Invoices and payments | 10 years, an accounting obligation |
| Tutor conversations | Until the end of the school year |
| Audit log | 5 years |
Children’s data
A minor pupil’s data is processed only with their legal guardian’s consent, as the law requires. Pupils cannot message each other, their photos are published only with the parents’ agreement, and the pupil’s space shows only their own work.
Artificial intelligence
Two tools use AI. Nour, the site’s assistant, answers families’ questions; it does not see pupils’ files. The tutor helps a pupil revise through questions and hints; its conversations are visible to the school, a safety filter keeps out topics unrelated to lessons, and it never does the work for the pupil.
Messages are processed by our AI subcontractors, bound by contract to confidentiality, who do not use them to train their models. Only what the answer needs is sent to them.
Security and the log
Personal accounts, encrypted exchanges, daily backups. Every change to a mark, an absence or a payment is written to an audit log — who, what, when — that the direction reviews and that cannot be erased.
Your rights
- To be told what is done with your data — which is what this notice is for
- To access your family’s data and receive a copy
- To have inaccurate data corrected
- To object to processing that schooling does not require
These rights are exercised from the parents’ space or through the office; we answer within a month. If an answer does not satisfy you, you may refer the matter to the National Authority for the Protection of Personal Data (ANPDP).