Blossom Education

Privacy Policy

How we collect, use and protect your data and your children’s data.

Last updated : 2025-09-09

1. Who is the data controller?

The data controller is:
Blossom Education — Ouaga 2000, Burkina Faso.
Phone/WhatsApp: +226 04 40 11 11
Email: contact@blossom-burkina.com

2. What data do we collect?

  • Parent/guardian data: identity (name), contact details (email, phone, address), account (login, language), supporting documents (ID, proof of address).
  • Child data: identity, photo (if consented), date of birth, school group, care mode, health info strictly necessary for care (e.g., allergies, past conditions provided by parents), consents (photos, first aid).
  • Administrative data: invoices, payments, enrollment history, communications.
  • Technical data: logs, essential cookies, browsing information (see “Cookies & trackers”).

3. Purposes & legal bases

  • Contract performance: enrollment, care, invoicing, education follow-up.
  • Consent: child photos, certain health information provided by parents, marketing communications (opt-in).
  • Legal obligations: accounting, regulations applicable to early childhood care.
  • Legitimate interests: site & Parent Portal security, service improvement, fraud prevention.

4. Where does the data come from?

We primarily collect data from parents via our forms (online and/or paper) and the Parent Portal. Some information comes from communications with the educational/administrative team and technical providers necessary to deliver the service.

5. Who do we share data with?

Data is shared on a limited basis with:

  • Authorized educational and administrative staff;
  • Technical providers (hosting, communication tools, payments);
  • Competent authorities where required by law.
All access is governed by contractual and security measures.

6. How long do we keep data?

We keep data for the duration of schooling and for applicable statutory periods (e.g., accounting). Consent-based data is kept until consent is withdrawn or the purpose expires.

7. Security

We implement technical and organizational measures to protect data (access controls, encryption at rest and/or in transit where possible, logging, backups, least-privilege principle).

8. Children’s data

Children’s data is handled with reinforced care. Health information is limited to what is strictly necessary for care and first aid, based on information provided by parents/guardians and/or legal obligations in force.

9. Cookies & trackers

We use cookies strictly necessary for operation (session, security). Audience measurement or social media cookies may be used with your consent when enabled. You can manage preferences in your browser settings.

10. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability where applicable. You may also withdraw consent at any time. To exercise your rights: dpo@blossom-burkina.com. You may lodge a complaint with the competent authority.

11. International transfers

Where providers are located outside your country, we ensure appropriate safeguards are in place (e.g., standard contractual clauses, data localization, or recognized equivalents).

13. Changes to this policy

We may update this policy to reflect legal, technical or organizational changes. For material changes, we will notify you through appropriate channels.