1. Introduction

This Privacy Policy applies to The New Dimension College ("the College", "we", "our" or "us") and describes how we handle personal information obtained through our website and interactions with prospective students, students and other visitors.

We aim to handle personal information in accordance with applicable Kenyan data protection laws, including the Data Protection Act, 2019, and applicable regulations.

2. Information We May Collect

Depending on how you interact with the College, we may collect:

2.1 Information You Provide

• Your name and contact details, such as telephone number and email address.
• Course or programme enquiries and admission-related information.
• Information submitted through website forms, emails or telephone enquiries.
• Student registration and academic information where necessary for College services.
• Payment and fee records where relevant to student administration.

2.2 Website and Technical Information

Our website or hosting services may process technical information such as browser type, device information, server logs and pages requested. Cookies or analytics information may also be collected if the relevant services are enabled.

3. How We Use Personal Information

We may use personal information for legitimate College activities, including:

• Responding to course enquiries and requests for information.
• Supporting applications, admissions and student registration.
• Managing academic records, student communication and administration.
• Maintaining fee records and processing payments where applicable.
• Providing updates about programmes, intakes and College activities.
• Maintaining website security and troubleshooting technical problems.
• Meeting applicable legal, regulatory and reporting obligations.

Where consent is required for a particular use, we will seek it as required by applicable law. You may opt out of promotional communications where applicable.

4. Lawful Basis for Processing

We process personal information where an applicable lawful basis permits us to do so. Depending on the circumstances, this may include consent, taking steps at your request before entering into an arrangement, performing contractual obligations, complying with legal requirements or pursuing legitimate interests permitted by law.

5. Sharing and Disclosure

We do not sell personal information. Where necessary and lawful, we may share relevant information with:

• Website hosting, technical support and other service providers.
• Relevant examination, accreditation or education authorities.
• Payment service providers where payment processing is required.
• Government or regulatory authorities where disclosure is legally required.

We seek to limit disclosures to information necessary for the relevant purpose and expect service providers to handle information appropriately. Any international transfer of personal information must comply with applicable data protection requirements.

6. Data Security

We take reasonable measures appropriate to the circumstances to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, appropriate technical safeguards and secure handling of records.

No method of transmitting or storing information can be guaranteed to be completely secure. Please avoid sending sensitive information through unsecured channels unless necessary and appropriately protected.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable educational, administrative, financial and legal recordkeeping requirements. When information is no longer required, we take appropriate steps to delete it, anonymise it or securely dispose of it, subject to applicable law.

8. Your Data Protection Rights

Subject to applicable law and any relevant limitations, you may have the right to:

• Be informed about how your personal information is used.
• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where legally applicable.
• Object to or request restriction of certain processing where applicable.
• Withdraw consent where processing is based on consent.
• Raise a complaint with the relevant data protection authority.

To exercise a right, contact the College using the details below. We may need to verify your identity before responding. Some requests may be subject to legal obligations or other lawful limitations.

9. Cookies and External Services

Our website may use essential technical features and, if enabled, cookies or third-party services to support functionality, security or website analytics. Third-party services may process information in accordance with their own privacy policies.

You can manage cookies through your browser settings. Where required by law, we will seek consent before using non-essential cookies or similar technologies.

10. Children's Personal Information

Where personal information relates to a child, we will handle it in accordance with applicable legal requirements and any necessary parental or guardian consent and safeguards. Information should only be provided by an authorised person where required.

11. Changes to This Policy

We may update this Privacy Policy when our practices, services or legal obligations change. The revised version will be published on this page with an updated date. We encourage visitors to review it periodically.