Privacy Policy

This policy applies to www.mullycollege.ac.ke, the public website for Mully College, a TVETA-accredited vocational college run by Mully Children's Family (MCF). It does not cover MCF's other websites, programmes, or children's-home operations, which are separate and governed by their own policies.

The site collects personal data only through two forms you choose to fill in — nothing is collected automatically for tracking or advertising purposes.

Contact-form data is used solely to route and respond to your enquiry to the right college department.

Application-form data is used to process your admission application — including verifying academic eligibility, matching you to a course, and assessing sponsorship/bursary eligibility where declared.

Both forms write directly to a Supabase (PostgreSQL) database. Row-level security is configured so that submissions are insert-only from the public site — the public cannot read, edit, or delete other people's submissions.

College staff access submitted messages and applications through a sign-in-protected admin area (/admin) on this site. [MCF TO CONFIRM] which staff roles have access, and the Supabase project's hosting region, for cross-border data-transfer purposes.

The Contact page embeds a Google Maps view of the Yatta campus. Loading that embed may allow Google to set its own cookies or collect data under Google's own privacy policy, independent of this site — this site does not control that behaviour.

This site is hosted on Cloudflare Pages, and college email runs on Microsoft 365. Neither is used to track visitors of this website.

No analytics, advertising, or tracking scripts are present anywhere on this site as of this policy's draft date — confirmed directly against the site's source code.

This site does not set any cookies of its own — no analytics, no advertising, no visitor tracking, confirmed directly against the site's source code as of this policy's draft date.

The only cookie exposure comes from the Google Maps embed on the Contact page, which may set cookies from Google's own domain when it loads, under Google's own cookie policy — not this site's.

[MCF TO CONFIRM] — no retention period is currently defined in the site's configuration or in college policy. This needs a decision from MCF/college administration before this policy can be treated as final.

Some applicants to /apply may be under 18. [MCF TO CONFIRM] whether any additional safeguarding, parental/guardian consent, or child-protection procedure applies to data collected from minor applicants, consistent with MCF's broader child-protection commitments.

Kenya's Data Protection Act, 2019 gives you rights over your personal data, including the right to access it, correct it, request its deletion, object to certain processing, and lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any of these rights regarding data you've submitted to this site, contact the college using the details below.

Questions about this policy or your data: [MCF TO CONFIRM] a dedicated privacy contact, or approve using admissions@mullycollege.ac.ke (the site's existing live mailbox) in the meantime.