• Identity: Student ID (format: DEPTYYNNNN, e.g., GSC230001), full name, department, and level/class
• Authentication: Bcrypt-hashed password and login timestamps
• Voting: A record that you voted (not which candidate), used solely to prevent duplicate votes
• Usage: IP address, browser type, and activity log entries for security auditing
• Device Information: Session data to maintain your logged-in state

• Authenticating your identity during login and voting
• Enforcing one vote per student per election
• Generating anonymous election results and statistics
• Maintaining a security audit trail (activity logs)
• Communicating important election-related information from school administration
• Preventing voting by graduated or archived students

• Passwords hashed with bcrypt -- never stored in plain text
• CSRF tokens on all forms to prevent cross-site request forgery attacks
• PDO prepared statements on all database queries to prevent SQL injection
• Session cookies set with HttpOnly and SameSite=Lax flags
• Admin actions restricted to authenticated admin accounts only
• All sensitive data transmitted over HTTPS (in production)
• Activity logging for all significant actions

Your data is retained for as long as you are an active or recently graduated student of Nkoranza SHTs. After graduation, accounts are automatically archived via nightly cron job. Anonymised election totals are kept permanently as historical records. Individual vote choices are never stored in a way that links them to your identity. Activity logs are retained for security auditing and may be archived after 5 years.

• Access the personal information held about you via your profile page
• Request correction of inaccurate data by contacting administration
• Request account deletion after graduation (subject to election record retention requirements)
• Be informed about how your data is used (this policy)
• Report any privacy concerns to the school administration
• Opt out of non-essential communications

We do not sell, trade, or transfer your personal information to any external parties. Aggregated, anonymised election results are displayed publicly on the Results page and may be shared with school administration. Law enforcement or regulatory authorities may receive information if required by Ghanaian law.

This system is designed for students of Nkoranza SHTs and is operated under the supervision of the school in compliance with Ghana's Data Protection Act, 2012 (Act 843). If you have concerns about how a minor's data is handled, contact the school administration directly. Parental consent is obtained through the school enrollment process.

This system uses essential cookies for authentication, session management, and CSRF protection. No third-party tracking cookies are used. You can manage your cookie preferences via the Cookie Policy page. Session cookies expire when you close your browser or after inactivity.

We may update this policy from time to time. Any significant changes will be announced via the system dashboard or email notification. Continued use of the platform after changes are posted constitutes acceptance of the updated policy. The "Last Updated" date at the top of this page will reflect the most recent revision.

For privacy concerns, data access requests, or questions about this policy, please contact our Data Protection Officer through the channels below. We aim to respond to all legitimate requests within 14 business days.