Privacy Policy

We collect information in the following ways:

a. Information you provide directly

• Account & school profile: school name, address, campus details, logo, contact numbers, and billing information.
• User accounts: name, email, phone number, role (admin, teacher, accountant, parent, student), profile picture, and authentication credentials.
• Academic & operational data: admissions records, classes, sections, attendance, marks, fee vouchers, payroll, inventory, and other records that your institution chooses to store in SchoolDesk.
• Communications: messages you send through forms, support requests, or in-app messaging.

b. Information collected automatically

• Device and log data (IP address, browser, operating system, device identifiers).
• Usage data such as pages visited, features used, and timestamps.
• Cookies and similar technologies for authentication, preferences, and analytics.

c. Information from third parties

We may receive limited information from payment processors, SMS/WhatsApp gateways, and authentication providers (e.g. Google sign-in) strictly to deliver the Service.

• To provide, maintain, and improve the Service.
• To authenticate users and secure accounts.
• To process fee payments, payroll, and generate vouchers and reports.
• To send transactional notifications (fee reminders, attendance alerts, exam results) via SMS, email, WhatsApp, or in-app messages.
• To provide customer support and respond to inquiries.
• To comply with legal obligations and enforce our Terms of Service.
• To detect, prevent, and address fraud, abuse, or security incidents.

When a school uses SchoolDesk, the school is the data controller of the student, parent, and staff records it uploads. SchoolDesk acts as a data processor on the school's behalf. Parents and students should direct requests about their personal records (access, correction, deletion) to their school administration in the first instance.

We do not sell your personal information. We share information only as needed to operate the Service:

• Service providers: hosting, database, email, SMS/WhatsApp delivery, and payment processors, under appropriate confidentiality and security obligations.
• Within your institution: data is visible to authorised users of your school based on role-based permissions.
• Legal requests: when required by law, court order, or to protect rights, safety, and property.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with continued protection of your information.

We implement industry-standard administrative, technical, and physical safeguards including encryption in transit (TLS), encrypted storage, role-based access control, audit logging, and regular backups. No system is 100% secure; you are responsible for keeping your account credentials confidential and notifying us immediately of any suspected unauthorised access.

We retain personal information for as long as your institution's account is active or as needed to provide the Service. Upon termination, data may be retained for a reasonable period for backup, legal, and audit purposes, after which it is securely deleted or anonymised. Schools may request export of their data prior to deletion.

SchoolDesk is designed to be used by educational institutions. Information about students under the age of 18 is collected and managed by the school under its own privacy obligations and applicable law. SchoolDesk does not knowingly collect personal information directly from children outside the context of a school account.

Subject to applicable law, you may have the right to:

• Access and obtain a copy of personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion or restriction of processing.
• Object to certain processing or withdraw consent where applicable.
• Lodge a complaint with a relevant data protection authority.

To exercise these rights, contact your school administrator or reach us using the details below.

We use essential cookies for authentication and session management, and optional analytics cookies to understand usage patterns and improve the product. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

SchoolDesk primarily stores data on cloud infrastructure within secure data centres. Where data is transferred across borders, we ensure appropriate safeguards consistent with applicable law.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email. Continued use of SchoolDesk after changes become effective constitutes acceptance of the revised policy.

Questions or concerns about this Privacy Policy or your data can be sent to SchoolDesk via the contact form on our website, or by calling 0305-7390446. SchoolDesk is developed and operated by Elevortech.