1) Information we collect
Depending on how your school uses the LMS, we may process:
Account & profile
- Name, email, phone number, role (Admin/Teacher/Student/Parent)
- Class, section, subjects, teacher classes
- Parent–student linkage
Academic & school records
- Attendance, marks/results, homework, timetable
- Fee plans, invoices, payment status (we do not store full card numbers)
Communications
- Notices you send/receive through App, Email, SMS, or WhatsApp (message text, recipients, timestamps)
- Support requests and feedback
Device & technical
- Log data (IP, browser/OS, device type), session cookies/local storage
- Crash/diagnostic events to improve reliability
Files you upload
- Assignments, documents, media needed for school operations
2) How we use information
- Create and manage user accounts and roles
- Run core LMS features: attendance, results, fees, notices, messaging, reports
- Send service and school notifications by the channels you choose (App/Email/SMS/WhatsApp)
- Provide support, prevent abuse, secure the platform, and meet legal requirements
- Improve performance and user experience (non-identifying analytics)
Legal bases (where applicable): contract (to provide the LMS), legitimate interests (security, improvement), consent (optional communications), and legal obligations.
3) Messaging via Email, SMS and WhatsApp
When a school enables a channel, we share the minimum necessary data with that provider to deliver the message:
- Email: recipient emails and message content via our SMTP provider.
- SMS: recipient phone numbers and message content via the selected SMS gateway.
- WhatsApp (Meta WhatsApp Cloud API): recipient phone numbers and message content/template variables are sent to Meta to deliver messages. Your school must use approved templates for out-of-session messages per Meta’s rules.
Opt-out: If you don’t wish to receive certain notices, contact your school or email us at lms1@advistors.co.uk. Some messages (e.g., critical service or legal notices) may still be required.
4) Cookies & tracking
We use essential cookies or local storage to keep you logged in and protect your session. We do not use third-party advertising cookies inside the LMS.
5) Sharing of information
We do not sell personal data. We share data only with:
- Your school staff (admins/teachers) and, where relevant, parents/guardians
- Service providers under contract, for hosting, databases, email/SMS/WhatsApp delivery, backups, and analytics (examples include cloud hosting such as Google Cloud Platform and Meta’s WhatsApp Cloud API)
- Legal authorities when required by law or to protect rights, safety, and security
All processors are bound by confidentiality and data-protection terms.
6) International transfers
Our infrastructure or providers may operate in multiple countries. We use recognized safeguards (such as standard contractual clauses or equivalent measures) to protect data during transfers.
7) Data retention
- School records (attendance, results, fees) are kept for as long as the school account is active, or as instructed by the school’s policy.
- System logs are typically retained for up to 12 months unless we must keep them longer for security, auditing, or legal reasons.
- Backups are kept for a limited period and then securely deleted.
Your school can ask us to delete or export data at any time, subject to lawful requirements.
8) Security
We use industry measures such as encryption in transit (HTTPS), access controls, role-based permissions, audit logs, and regular updates. No system is 100% secure; we work continuously to protect your information and notify the Controller of any notifiable incidents.
9) Children and students
The LMS is used in a school context. When student data belongs to minors, the school is responsible for obtaining any required parental/guardian consent and for providing appropriate notices. We process that data only on the school’s documented instructions.
10) Your rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict/oppose processing of your data.
- If your school is the Controller: please contact your school first. We will support them in fulfilling your request.
- If you signed up directly with us: lms1@advistors.co.uk and we’ll help you.
We may ask for information to verify your identity before acting on a request.
11) How to delete your data (User Data Deletion)
- School admins: delete user records or classes/sections from the Admin Dashboard where available, then request a final purge from backups.
- Parents/Students/Teachers: contact your school administrator or email lms1@advistors.co.uk with your name, role, and school.
We will confirm the Controller’s authorization (where the school is Controller) and delete or anonymize the data, including scheduled removal from backups within normal retention cycles.
12) Third-party links
School or user-generated content may contain links to other sites. We are not responsible for their privacy practices. Please review those sites’ policies.
13) Changes to this policy
We may update this policy from time to time. Material changes will be shown on this page with a new “Effective date”. Continued use of the LMS means you accept the updated policy.
14) Contact
Advistors – Privacy
Email: lms1@advistors.co.uk
Short summary (non-legal)
We collect only what we need to run the LMS. The school controls student data; we process it for them. We use providers (hosting, email, SMS, WhatsApp) to deliver services. You can ask for access or deletion through your school or by emailing us. We don’t sell data.