Privacy & Data Protection

The ICSA Parents & Teachers Organisation ("ICSA PTO", "we", "us") operates this platform to coordinate events, contributions, clubs and communications for the International Community School of Abidjan community. For any data-protection question, contact us at info@icsa-pto.org.

The platform is designed, built, hosted and technically operated by YKRA Holding, acting as our data processor under the ICSA PTO's instructions. The ICSA PTO remains the data controller — it decides what data is collected and why. YKRA Holding processes data only to run and maintain the platform, applies the safeguards described below, and does not use your data for its own purposes.

Learn more about the technical operator at www.ykraholding.com.

We deliberately collect the minimum necessary to run PTO services:

• Account data (parents & staff): name, email address, and optionally a phone number, used to sign in and to contact you about PTO activities.
• Activity data: event sign-ups, ticket and booth bookings, club memberships, contributions and enquiries you submit.
• Payment references: for mobile-money transactions we store only the transaction/confirmation reference you provide. We never collect or store bank-card numbers or mobile-money PINs.
• Technical data: limited information such as IP address for security and spam prevention on public forms.

We do not knowingly collect personal data directly from children. Any reference to a student is provided and managed by their parent or the school.

• Legitimate interests / consent: to provide PTO services you have asked for (accounts, tickets, clubs, contributions).
• Contractual / organisational necessity: to process a booking or contribution you initiate and to reconcile it with the treasury.
• Legal & financial record-keeping: to keep accurate records of PTO income and expenditure.

We never sell personal data, and we do not use it for third-party advertising.

• All traffic is encrypted in transit using HTTPS/TLS.
• Passwords are stored only as salted one-way hashes — never in plain text.
• Access is role-based: administrators, executives and members each see only what their role allows.
• Payment is handled via mobile-money providers; we store only a transaction reference for reconciliation, not card or PIN data.
• Hosting is on a managed, access-controlled environment with regular updates.

We keep personal data only as long as needed for the purpose it was collected, or as required for PTO financial records. Account data is removed on request (see your rights below) or when the school-API verification removes the need to store it. Financial records may be retained for the period required for proper accountability.

You may ask us to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your account and associated personal data (erasure), subject to financial record-keeping obligations;
• object to or restrict certain processing; and
• withdraw consent at any time.

To exercise any of these rights, email info@icsa-pto.org and we will respond promptly.

We use only essential cookies needed to keep you signed in and to remember your language choice. We do not use third-party advertising or tracking cookies.

We may update this statement as our practices evolve — particularly once the school-API verification is live. The "last updated" date above reflects the current version.