1. Scope of this Policy

This Policy applies to all personal data processed by Edusmartech in the course of providing services to schools, including but not limited to:

• Student information (e.g. name, date of birth, grades, etc)
• Parent information (e.g. name, date of birth, phone number, etc)
• Teacher and staff information (e.g., name, email, role, etc)
• School information (e.g., name, address, administrator contact information, etc.)

2. Data Protection Measures

We adopt the following measures:

1. Encryption: Edusmartech uses industry-standard encryption to protect data in transit and at rest.



2. Access Controls: Role-based access controls ensure that only authorized personnel have access to sensitive data.



3. Authentication: Secure authentication mechanisms, such as single sign-on (SSO) and multi-factor authentication (MFA), protect user accounts.



4. Data Backup and Recovery: Regular data backups and a disaster recovery plan ensure business continuity in case of data loss or corruption.



5. Network Security: Firewalls, intrusion detection, and prevention systems protect against unauthorized access and malicious activity.

3. Data Protection Policies

We adopt the following data protection policies:

1. Data Minimization: Edusmartech collects and processes only the minimum amount of personal data necessary to provide services.



2. Data Retention: Edusmartech retains personal data only for as long as necessary to provide services or as required by law. Edusmartech reserves the right to delete the data of any school that has discontinued to use the service over a period of 12 months from the last subsription expiration date.



3. Data Subject Rights: Edusmartech recognizes and respects data subject rights, including access, rectification, erasure, restriction, and portabilit



4. Data Breach Notification: Edusmartech has a data breach notification policy in place to notify affected individuals and regulatory authorities in case of a breach.



5. Lawfulness: We process personal data in accordance with applicable laws and regulations.



6. Storage limitation: We retain personal data only for as long as necessary to achieve our purposes.



7. Security: We implement reasonable security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

4. Compliance

Edusmartech is compliant to:

1. GDPR: Edusmartech complies with the General Data Protection Regulation (GDPR) for EU-based schools.



2. FERPA: Edusmartech complies with the Family Educational Rights and Privacy Act (FERPA) for US-based schools.



3. Other Regulations: Edusmartech complies with other applicable data protection regulations, such as the California Consumer Privacy Act (CCPA) and the Australian Privacy Act.

7. Certification

1. ISO 27001: Edusmartech is certified to the ISO 27001 standard for information security management.



2. SOC 2: Edusmartech is certified to the SOC 2 standard for security, availability, processing integrity, confidentiality, and privacy.

By using our website, platform, and services, you acknowledge that you have read, understood, and agree to be bound by this Data Protection Policy.

Last updated: 1 January 2025