Privacy Policy

Last Updated: March 03, 2026

1. Introduction

We take your privacy seriously. This policy explains how [School Name] and our system provider collect, use, and protect your personal information in compliance with GDPR.

2. What Data We Collect

Category Examples Legal Basis
Identity Name, ID number, photo, date of birth. Public Task (Education)
Contact Email, phone number, home address. Public Task / Contract
Academic Grades, attendance, class schedule. Public Task
Health (Sensitive) Allergies, medical conditions. Explicit Consent / Vital Interests

3. How We Use Your Data

  • To manage your enrollment and academic progress.
  • To communicate with students and parents.
  • To ensure safety and medical care when needed.
  • To process fee payments (parents).

4. Data Retention

We keep your data only as long as necessary:

  • Student Record: Until you leave the school + 7 years (archived).
  • Health Data: Deleted 3 years after you leave.
  • Payment Records: Kept for 7 years for tax laws.

5. Your Rights (GDPR)

You have the right to:

  • Access: Request a copy of your data.
  • Rectify: Correct mistakes in your data.
  • Erase: Ask us to delete your data (Right to be Forgotten).
  • Export: Get your data in a portable format.
  • Object: Stop us from using your data in certain ways.

6. Contact Us

If you have privacy questions, please contact our Data Protection Officer (DPO):

Email: privacy@school.edu
Phone: +1-234-567-8900