Skip to content

Legal

Privacy Policy

How we collect, use, store and protect personal data — including the data schools hold about students and staff.

Draft — pending legal review

This privacy policy is a structural draft prepared alongside the website. It has not yet been reviewed by legal counsel and must not be treated as the published policy or relied on as a statement of our obligations.

Last updated: not yet published.

1. Our role and yours

When a school uses UnoCampus, the school decides what personal data is collected about its students, parents and staff and why. We process that data on the school’s instructions in order to provide the platform. We also hold a small amount of data about the school’s own users and about people who contact us through this website, and for that data we decide the purpose ourselves.

2. What we collect

Data a school puts into the platform

  • Student records — name, class and section, admission details, guardians and contacts
  • Fee records — structures, instalments, collections, receipts and concessions
  • Attendance records for students and staff
  • Employee records — designation, joining details, leave and payroll inputs
  • Transport records — routes, stops and student assignments
  • Documents uploaded against a student or employee record

Data we collect directly

  • Account details for users who sign in — name, email, role and school
  • Sign-in and activity records, including timestamp and originating IP address
  • Enquiry details submitted through the demo form on this website

3. Why we process it

To provide and support the platform, to authenticate users and enforce role permissions, to maintain an audit trail of important changes, to respond to enquiries and to meet legal and contractual obligations. We do not sell personal data, and we do not use school operational data to train models.

4. Who we share it with

Service providers who help us run the platform — hosting, storage, messaging and email delivery — process data on our instructions and under contract. We may disclose data where the law requires it. We do not otherwise share school data with third parties.

5. How we protect it

Access is governed by role-based permissions, school operational data is scoped to the correct school, important changes are written to an audit trail, and private documents are served through short-lived authorised links rather than public URLs. There is more detail on our security page.

6. How long we keep it

School data is retained for as long as the school’s agreement with us is in force, and afterwards for the period the school specifies or the law requires. Enquiry data from this website is kept only as long as it is needed to follow up.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you have rights over your personal data, including access, correction and erasure, and the right to raise a grievance. Where the data concerns a student or staff member of a school, requests should ordinarily go to the school, which will contact us where necessary.

8. Contact

For any privacy question, or to raise a grievance, use the contact form. Grievance officer details will be published here alongside the final policy.