Privacy Policy

Last updated: 24 September 2026

Heartstrings Autism Academy respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store and protect information when you visit our website, contact us or enquire about our school, learning programmes and support services.

1. About Heartstrings Autism Academy

Heartstrings Autism Academy is a special needs school and therapy centre located on Kunde Road, Valley Arcade, Nairobi, Kenya.

For the purposes of this Privacy Policy, "Heartstrings Autism Academy", "we", "us" and "our" refer to Heartstrings Autism Academy.

2. Information We May Collect

Depending on how you interact with our website and services, we may collect information such as:

• Your name.
• Phone number.
• Email address.
• Information you provide when making an enquiry.
• Information about the child when voluntarily provided as part of an enquiry.
• Details about the services or programmes you are interested in.
• Messages sent to us through WhatsApp, email or website forms.
• Technical information about your visit to our website.

You are not required to provide more information than is reasonably necessary for us to respond to your enquiry or provide the service you have requested.

3. Information About Children

Because Heartstrings Autism Academy works with children, some information provided by parents or guardians may relate to a child.

We ask parents, guardians and other authorised persons to provide information about a child only where they are permitted to do so. Information about a child should be provided only when it is relevant to an enquiry, assessment, admission, learning programme, therapy or other service.

We treat information relating to children with appropriate care and use it only for legitimate educational, administrative, communication or service purposes.

4. How We Use Personal Information

We may use personal information for purposes including:

• Responding to enquiries.
• Arranging school visits or consultations.
• Providing information about our programmes and services.
• Communicating with parents, guardians and authorised contacts.
• Processing admissions and related administrative matters.
• Providing learning, therapy or support services.
• Improving our website and communication.
• Maintaining website security.
• Meeting applicable legal and regulatory requirements.

5. WhatsApp and Other Communication Channels

Our website may provide links that allow you to contact Heartstrings Autism Academy through WhatsApp, telephone or email.

When you choose to contact us through one of these services, information you provide may also be processed by the relevant service provider under its own privacy policy and terms.

Please avoid sending highly sensitive information through WhatsApp, email or website forms unless we specifically request it through an appropriate and secure process.

6. Website Forms

If you submit information through a contact or enquiry form on our website, we may use the information you provide to respond to your request.

We do not use enquiry information for unrelated purposes without an appropriate reason or permission where required by applicable law.

7. Cookies and Website Analytics

Our website may use cookies or similar technologies to make the website work properly, understand how visitors use the website and improve the website experience.

Cookies may collect information such as browser type, device information, pages visited, approximate location and general website usage information.

Where third-party analytics or similar services are used, those services may process information according to their own privacy policies.

8. Third-Party Services

Our website may use third-party services such as website hosting, analytics, maps, communication tools, security services or other online platforms.

These providers may process certain information as necessary to provide their services. We encourage users to review the privacy policies of third-party services when appropriate.

9. How We Protect Your Information

We take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no website, online platform or method of electronic transmission can be guaranteed to be completely secure. You should therefore take care when submitting information online.

10. Sharing Personal Information

We do not sell personal information to third parties.

We may share information where reasonably necessary to provide our services, operate our website, comply with legal obligations, protect our rights or respond to lawful requests.

Where third-party service providers process information on our behalf, we seek to work with providers that apply appropriate safeguards to personal information.

11. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain appropriate records, resolve disputes, meet legal obligations or protect our legitimate interests.

The length of time information is retained may depend on the type of information and the reason it was collected.

12. Your Privacy Rights

Depending on applicable Kenyan data protection law, you may have rights relating to your personal information, including rights to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where applicable.
• Object to or restrict certain processing where applicable.
• Withdraw consent where processing is based on consent.
• Raise a concern about how your personal information is handled.

Some rights may be subject to legal or other applicable limitations.

13. Marketing Communications

If we send marketing or promotional communications, we will provide an appropriate way to opt out where required.

You may also contact us if you no longer wish to receive promotional communications from us.

14. Children's Privacy

Our website is not intended for children to independently submit personal information or make service enquiries.

Parents, guardians and authorised adults should make enquiries involving children and provide information where they have the appropriate authority to do so.

15. Links to Other Websites

Our website may contain links to other websites or online services. Those websites operate independently from Heartstrings Autism Academy and may have their own privacy policies.

We are not responsible for the privacy practices or content of third-party websites.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, legal requirements or privacy practices.

When changes are made, the updated version will be published on this page with a revised "Last updated" date.

17. Contact Us

If you have questions about this Privacy Policy or how Heartstrings Autism Academy handles personal information, please contact us.