Privacy Policy

Horizon Academy Website

Effective Date: July 23, 2026
Last Updated: July 27, 2026

Legal Disclaimer: This privacy policy template is provided for informational and administrative planning purposes. While tailored for a private, independent school operating in Johnson County, Kansas, it does not constitute formal legal advice. School administration should review and customize this document in consultation with qualified legal counsel.

1. Introduction & Overview

At Horizon Academy (“School,” “we,” “us,” or “our”), located in Roeland Park, Kansas, we are committed to respecting and protecting the privacy of our students, parents, guardians, alumni, faculty, applicants, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information collected through our official school website (located at horizon-academy.org) and connected web services.

2. Information We Collect

We collect information through two primary mechanisms: details provided directly and voluntarily by users, and technical data collected automatically during interaction with our website.

A. Information You Provide Voluntarily

  • Inquiry & Admission Forms: Student and parent/guardian contact details (names, mailing addresses, email addresses, phone numbers), grade levels, academic history, applicant background information, and personal essays.
  • Portals & Account Credentials: Usernames, passwords, and security verification data for parent, student, alumni, or staff portals (e.g., Student Information Systems or Learning Management Systems).
  • Financial Transactions & Tuition Payments: Billing contact details, payment card information, and banking details submitted for tuition, application fees, continuous enrollment deposits, event ticketing, or auxiliary programs.
  • Philanthropy & Development: Donor names, contact details, gift amounts, payment preferences, and pledge commitments made to the School’s annual fund or capital campaigns.
  • General Inquiries & Communications: Messages, feedback, or requests submitted via online contact forms or email links.

B. Information Collected Automatically

  • Technical Log Data: Internet Protocol (IP) addresses, device types, operating systems, browser specifications, referring URL pages, and timestamps.
  • Cookies & Tracking Technologies: Small data files transferred to user browsers to preserve session states, enable portal logins, measure site navigation, and optimize user experience.

3. How We Use Your Information

We utilize the information collected through our website exclusively for educational, operational, administrative, and advancement purposes, including:

  • Evaluating admissions applications and facilitating enrollment management.
  • Providing access to course materials, grade books, student portals, and school directories.
  • Sending critical administrative notices, severe weather notifications, emergency alerts, and newsletter communications.
  • Processing tuition payments, application fees, and charitable donations securely.
  • Managing school events, athletic scheduling, continuous re-enrollments, and alumni activities.
  • Maintaining website security, analyzing system performance, and preventing fraudulent transactions.

4. Student Data Privacy & Educational Records Standards

As a private, independent school, our student data practices are governed primarily by our enrollment contracts, privacy best practices, and applicable federal and state statutes.

  • Student Privacy & Confidentiality: Student educational, developmental, and behavioral records are treated with strict confidentiality. Access is restricted exclusively to authorized administrative, teaching, and support staff with a legitimate educational or operational interest. Student data is never packaged, rented, or sold for commercial advertising or third-party marketing.
  • Children’s Online Privacy Protection Act (COPPA): Our public website is intended for parents, adult community members, and prospective families. We do not knowingly collect personal information directly from children under 13 without verifiable parent/guardian consent or explicit school oversight for educational tool integration.
  • Privacy Framework Alignment: Although federal Family Educational Rights and Privacy Act (FERPA) regulations directly apply to institutions receiving federal funding from the U.S. Department of Education, the School voluntarily models its data governance and record handling after the core privacy standards established by FERPA and the Kansas Student Data Privacy Act (K.S.A. 72-6311 et seq.).

5. Information Sharing, Financial Security & Third-Party Service Providers

We do not sell, rent, or trade personal information to third-party advertisers. We share user data only under the following controlled circumstances:

A. Educational & Administrative Service Providers: We partner with trusted third-party technology providers to manage core school functions (e.g., Student Information Systems like Blackbaud or FACTS, Learning Management Systems like Canvas or Google Classroom, and admission portals). These vendors are bound by strict contractual confidentiality obligations and are permitted to process student or parent data solely to perform requested services for the School.

B. Secure Payment Processing: All financial transactions—including tuition payments, application fees, and philanthropic gifts—are handled through encrypted, PCI-DSS compliant payment gateways. The School does not store full credit card numbers or bank account routing details on its primary website web servers.

C. Donor Privacy: The School values the trust of its donors. We do not share or sell donor contact information. Donor names may be recognized in annual reports or publications unless the donor explicitly requests anonymity during the gift submission process.

D. Legal & Operational Protections: We may disclose personal information if required to do so by applicable law, court order, or subpoena, or if we determine in good faith that disclosure is necessary to protect the safety, rights, or property of our students, staff, or community members.

6. Data Security & Storage

We maintain appropriate physical, administrative, and technical safeguards to prevent unauthorized access, disclosure, modification, or destruction of personal data. Users accessing student or parent portals are responsible for maintaining the confidentiality of their account credentials and passwords.

7. External Links & Media Release Policy

Our website may contain hyperlinks to external sites, educational portals, or athletic association pages. The School is not responsible for the privacy practices or content of third-party websites. Additionally, public website photography, video, or student spotlight features are governed by the School’s formal Media Release policy contained within our annual Parent/Student Handbook and enrollment contracts.

8. International Data Transfers & General Data Protection Regulation (GDPR)

Although Horizon Academy is located in the United States and primarily serves families within Kansas and Missouri, our website can be accessed globally. If you are accessing our website, applying for admission, or interacting with our services from within the European Union (EU), the European Economic Area (EEA), or the United Kingdom (UK), your personal information may be subject to the General Data Protection Regulation (GDPR) or UK GDPR.

A. Legal Bases for Processing

We process personal data under the GDPR relying on one or more of the following legal grounds:

  • Legitimate Interests: To evaluate admissions applications, manage school operations, facilitate continuous enrollment, process philanthropic contributions, and ensure website security.
  • Contractual Necessity: To fulfill our obligations under enrollment agreements, tuition arrangements, or service contracts.
  • Legal Compliance: To meet applicable legal, regulatory, or administrative obligations.
  • Consent: Where you have explicitly provided consent for specific communications or optional activities (which you may withdraw at any time).

B. International Data Transfers

Personal data collected through our website is transferred to, stored, and processed on servers located within the United States. By submitting your personal information to us, you acknowledge and consent to this transfer. We maintain technical, physical, and administrative safeguards to ensure your data receives an adequate level of protection, regardless of where it is processed.

C. Your Rights Under GDPR

Subject to applicable legal limitations, individuals located in the EU/EEA or UK possess specific rights regarding their personal data, including the right to:

  • Access and receive a copy of the personal data we hold about you.
  • Request Correction of inaccurate or incomplete personal records.
  • Request Erasure (“Right to be Forgotten”) of your personal data, subject to our statutory record retention requirements.
  • Restrict or Object to the processing of your data under certain circumstances.
  • Data Portability, allowing you to request a transfer of your data to another controller where technically feasible.

To exercise any of these rights, please contact us using the information provided in Section 9. We will respond to verified requests in accordance with applicable legal timeframes.

9. Your Rights, Choices & Contact Information

Parents, guardians, and web visitors may review, update, or request corrections to personal contact details by contacting the main office. You may opt out of non-essential promotional or community marketing emails at any time by using the “unsubscribe” link included at the bottom of such messages.

If you have any questions or concerns regarding this Privacy Policy or our website data practices, please contact us at:

Horizon Academy
4901 Reinhardt Drive
Roeland Park, KS 66205

Email: info@horizon-academy.com
Phone: (913) 789-9443