Privacy policy

1. Introduction

This policy applies to the school's website. The data controller is the school:

The site is built to collect as little as possible: no accounts for students or parents, no advertising and no trackers.

2. Information we collect

When you write to us through the contact form:

• the name, email, topic you choose and message you write;
• the language of the page you sent it from;
• a one-way hash of your IP address, not the address itself, to block automated repeat messages.

When you visit the site, the server briefly logs technical details of each request (IP address, page opened, time and browser type) for security and troubleshooting.

We do not collect payment data, location, user accounts or sensitive data. Please do not include health or other sensitive information about your child in a message.

3. How we use your information

• to answer your question;
• to keep the site and the form secure;
• to meet legal obligations, where they apply.

We do not use it for marketing, build profiles, make automated decisions or sell it.

4. Legal basis for processing

Under Albanian Law no. 124/2024 on Personal Data Protection we process data on these bases:

Your request

When you write to us, we process the message to reply.

Legitimate interest

Site security: the IP hash and the server's technical logs.

Legal obligation

When the law requires us to keep or disclose data.

5. Cookies and tracking technologies

The site uses only cookies strictly necessary for security and operation. We use no analytics, advertising or social media cookies, so we do not ask for consent. The full list is in the Cookie policy.

Cookies →

6. Third-party services

Hosting provider

Stores the site and its database on the school's behalf.

Google (Gmail)

Provides the school's email address, where notices of your messages arrive.

Anthropic (Claude)

Writes the site assistant's answers to the questions you type. See the section on the assistant.

Facebook, Instagram, Google Maps

Plain links. When you click one you leave our site and their policies apply.

The site loads no third-party scripts, fonts, videos, maps or buttons.

7. The AI assistant on the site

The chat button in the bottom-right corner opens the site assistant. When you write to it, your question and the recent messages of the same conversation are sent to Anthropic (the Claude model) to write an answer from the information published on this site.

• the school does not store conversations on its server or link them to your name;
• the conversation is kept only in your browser tab (sessionStorage) and is deleted when you close the tab or press New chat;
• to prevent misuse, the server briefly counts questions by a hash of your IP address;
• if you send feedback on the assistant (a rating and comment), we keep it anonymously, without name, email or IP, together with the page you sent it from, and delete it within 12 months;
• Anthropic processes the messages as a service provider; under its commercial terms it does not use them to train models and deletes them after a limited period; processing may take place in the United States.

The assistant can make mistakes and does not make decisions about enrolment or students. Do not share personal, health or other sensitive information; for individual cases contact the school directly.

8. Data retention

• Contact messages: as long as needed to reply; once closed, deleted within 12 months of being sent.
• Server technical logs: for a short time, only for security and troubleshooting.

9. Data security

• encrypted HTTPS connection;
• protection of the form against forged and automated submissions;
• IP addresses stored only as a hash, never as an address;
• messages are seen only by staff members with personal accounts in the admin panel.

No system on the internet is completely secure, which is why we collect only what we need.

10. Your rights

Under the law you have the right to:

• know whether we process your data and get a copy;
• ask us to correct or delete it;
• ask us to restrict processing, or object to it;
• receive your data in a usable format;
• withdraw consent, where processing is based on consent;
• complain to the Information and Data Protection Commissioner of Albania (www.idp.al).

Email irfanngjeqarischool@gmail.com. We reply within 30 days. A parent or guardian may use these rights on a child's behalf.

11. International data transfers

The school's email is provided by Google, which may process data outside Albania, including in the European Union and the United States, under its own safeguards. We do not transfer data to any other party abroad.

12. Children's privacy

• Students do not create accounts or enter data on the site.
• The site has no advertising, trackers or profiling.
• If you are under 18, ask a parent or guardian for help before writing to us.
• If your child appears in a photo or video and you want it removed, email irfanngjeqarischool@gmail.com and name the page. We treat the request as a priority.
• If we learn that a child sent us data without a parent's knowledge, we delete it on request.

13. Changes to this privacy policy

When we change how we use data, we update this page and the date it was last updated.

14. Contact us

For any privacy question: