How NuPay handles personal information: what we hold, why we hold it, who we share it with and what your rights are.
NuPay is school accounting and fee management software operated by NuClass Pvt Ltd, 603 Fidelity Building, Cnr 11th Avenue and Fife Street, Bulawayo, Zimbabwe (“NuPay”, “we”, “us”). This policy explains what personal information we handle, why, and what your rights are.
It covers this website (nupay.co.zw), the NuPay application and NuClass, our student management system, where a school uses it together with NuPay.
Most of the personal information in NuPay belongs to schools. A school that uses NuPay decides which students, parents and staff are recorded and what the information is used for. In data protection terms the school is the data controller and NuPay is its data processor: we handle that information on the school’s instructions, to provide the service.
If you are a parent, guardian or student and have a question about your information, your school is the right first contact. We will help the school respond.
NuPay is the data controller for a smaller set of information: the details of people who visit this website, ask for a demo, or hold a NuPay user account on behalf of a school.
On behalf of schools
From school staff who use NuPay
From visitors to this website
We do not sell personal information, and we do not use student or parent information for advertising.
We handle personal information in line with Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07] and its regulations. Depending on the purpose, we rely on the contract we have with the school, the school’s own lawful basis for processing its students’ and parents’ information, our legitimate interest in running and securing the service, legal obligations, or your consent where you have given it.
We share personal information only where it is needed to provide the service:
NuPay is hosted on Amazon Web Services in its Africa (Cape Town) region, in South Africa. Where information is stored or processed outside Zimbabwe, we take the steps the law requires to keep it protected.
We keep a school’s information for as long as the school uses NuPay. Financial records are kept for the period the school is required by law to retain them. When a school stops using NuPay, it can export its records, and we delete or return the information within 90 days, unless the law requires us to keep it longer.
Demo and contact enquiries are kept for up to 12 months.
No system is perfectly secure. If a breach affects your information, we will notify the school and the Data Protection Authority within 24 hours of confirming it, and help the school inform the people concerned.
Under the Cyber and Data Protection Act you have the right to:
If your information is in NuPay because of a school, please contact the school first. For information NuPay controls, contact us at [email protected].
The Data Protection Authority in Zimbabwe is the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).
NuPay holds information about students because their school has entered it. Students do not create NuPay accounts through this website, and parents do not need an account to pay an invoice. The school is responsible for having a lawful basis, including any parental consent the law requires, for the student information it records.
This website uses only the cookies and local storage needed for it to work. We do not use advertising cookies.
The NuPay application uses cookies to keep you signed in and to keep your session secure.
We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell the schools that use NuPay.
NuClass Pvt Ltd
603 Fidelity Building, Cnr 11th Avenue and Fife Street, Bulawayo, Zimbabwe
Email: [email protected]
Data Protection Officer: Tafadzwa Mutasa, [email protected]