Trust & compliance
Privacy & Security
This page is maintained by Pembroke House School to answer common security and privacy questions about Pembroke House School Admissions.
It describes the controls and practices we have chosen for this application. It is not an independent certification or legal advice.
Accounts are tied to individual email addresses. New accounts are created as parents; staff access is granted by a school administrator.
Staff can view and manage all applicants. Parents can only view and upload documents for the applicant record linked to their own account.
Passwords are handled by Lovable Cloud auth. We encourage strong, unique passwords and keep auth sessions short-lived.
Pembroke House School Admissions is built on Lovable Cloud, which provides the database, authentication, storage, and server runtime that power the application.
Lovable Cloud stores data in a hosted region selected when the project is created. This project is configured for the Europe region.
Lovable Cloud is GDPR-compliant by design and provides the underlying data-protection controls. Pembroke School remains responsible for how it uses that data and for configuring access appropriately.
We collect pupil, guardian, sibling, and previous-school information solely to process admissions enquiries and applications.
Uploaded documents (such as birth certificates, reports, or reference letters) are stored in a private bucket and are only accessible to staff and the parent account linked to that applicant.
We do not use applicant data for advertising, profiling, or any purpose outside the admissions process.
Lovable Cloud supplies the core infrastructure (database, auth, storage, email). Transactional emails are sent from notify.pembrokehouse.sc.ke.
No additional analytics, advertising, or third-party tracking scripts are installed on this application.
If future integrations are added, this page will be updated to list them.
The app uses a single authentication session cookie/local storage entry to keep you signed in. This is essential for the portal to function.
We do not use advertising cookies, third-party trackers, or analytics cookies on this site.
Application records are retained for the period required by Pembroke School’s admissions and record-keeping policies.
If you would like your account or your child’s application data deleted, please contact the admissions office using the details below.
Parents can view most of their submitted data by signing in to the portal. For access, correction, portability, or deletion requests, please email the admissions office.
We will respond to verified requests within the timeframe required by applicable data-protection law.
If you notice a security issue, have a privacy question, or need to report a vulnerability, please contact the admissions office directly.
We will review reports promptly and take appropriate action.
Shared responsibility
Lovable Cloud provides the secure platform and compliance-ready infrastructure. Pembroke School is responsible for collecting only the data needed for admissions, granting staff access carefully, and responding to families’ data-rights requests. Families are responsible for keeping their account credentials secure and for providing accurate information.
Last updated: 25 July 2026.