Data Protection

Privacy Policy

Learn how we protect and manage your personal information

Last Updated: January 1, 2024
~12 minute read
Effective Date: January 1, 2024

This privacy policy was last updated on January 1, 2024. We may update this policy from time to time.

1. Introduction

At SBM Schools ("we," "us," "our"), operated by Papa Mends IT Solutions also known as PM IT Solutions, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our school management platform.

By accessing or using SBM Schools, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please do not access the platform.

2. Data We Collect

2.1 Personal Information

We may collect the following types of personal information:

For Students

  • Full name and date of birth
  • Student ID and academic records
  • Parent/guardian contact information
  • Attendance and performance data
  • Medical information (if provided)

For Staff

  • Contact information
  • Professional details
  • Login credentials
  • Communication preferences
  • Bank details

2.2 Automatically Collected Information

When you use our platform, we may automatically collect:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Location data (general location based on IP address)

3. How We Use Your Data

Legitimate Purposes Only

We only use your personal data for legitimate educational and administrative purposes.

We use the information we collect for the following purposes:

  • To provide and maintain our services
  • To process transactions and manage payments
  • To communicate about platform updates
  • To personalize user experience
  • To monitor and analyze platform usage
  • To prevent fraudulent activities
  • To comply with legal obligations
  • To facilitate school operations

4. Data Sharing and Disclosure

4.1 When We Share Information

We may share your information in the following circumstances:

  • With Educational Institutions: Student data is shared with the respective educational institutions using our platform for educational purposes.
  • With Service Providers: We may share information with trusted third-party service providers who assist us in operating our platform.
  • For Legal Compliance: When required by law, regulation, or legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.

4.2 Data We Do Not Share

We Do Not Sell Your Data

We will NEVER sell your personal information or student data to third parties for marketing or advertising purposes.

5. Data Security

Security Measures

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Secure data backup and recovery procedures
  • Employee training on data protection
  • Physical security measures for our servers

While we implement robust security measures to protect your data, no method of transmission over the Internet or electronic storage is entirely foolproof. As such, we cannot guarantee absolute security. However, we are committed to maintaining the highest standards of data protection through continuous monitoring and improvements. You also play a vital role in safeguarding your information — please ensure that your login credentials are kept secure and not shared with others to prevent unauthorized access to your account.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Retention Periods

Student Records

Retained for the duration of enrollment plus 5 years

Financial Records

Retained for 7 years for tax purposes

User Accounts

Retained while active plus 2 years

Backup Data

Retained for 90 days before secure deletion

When we no longer need to retain your information, we will securely delete or anonymize it.

7. Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

Right to Access

You can request access to the personal information we hold about you.

Right to Correction

You can request correction of inaccurate or incomplete information.

Right to Deletion

You can request deletion of your personal information under certain circumstances.

Right to Restriction

You can request restriction of processing of your personal information.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within 30 days as required by applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our platform and store certain information.

Types of Cookies We Use

  • Essential Cookies: Required for the platform to function properly
  • Functionality Cookies: Remember your preferences and settings
  • Analytics Cookies: Help us understand how users interact with our platform
  • Performance Cookies: Help improve the performance of our platform

8.1 Cookie Management

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our platform.

For more information about how we use cookies and how you can control them, please see our Cookie Policy.

9. Children's Privacy

Special Protection for Children

We are committed to protecting the privacy of children who use our platform. Our services are designed for educational institutions and require parental consent for students under the age of 18.

We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as possible.

Parents and guardians can review their child's personal information, request deletion, or refuse further collection or use of their child's information by contacting us.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

For significant changes, we will notify you more prominently, such as by sending an email notification or displaying a prominent notice within our platform.

Stay Informed

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Company Information

Data Protection Officer

Privacy Concerns

If you have concerns about how we handle your data, please contact us first. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Contact Support