Privacy Policy for School ERP System

Effective Date: November 17, 2025

This Privacy Policy outlines how [Your School Name] ("we," "us," or "our") collects, utilizes, and safeguards the personal information of students, parents, and staff through our School Enterprise Resource Planning (ERP) system, provided by Second Shift ("the ERP provider").

This policy is designed to be transparent about our data practices and to comply with applicable data protection regulations. We are committed to protecting the privacy and security of all personal data we process.

1. Information We Collect

Our School ERP system collects and processes various types of information to facilitate the efficient management of school operations. This includes, but is not limited to:

• Student Information: This encompasses personal details such as name, date of birth, gender, and contact information. It also includes academic records, attendance, health records, and emergency contact details.
• Parent/Guardian Information: We collect names, contact details, and other information necessary for communication and billing.
• Staff Information: This includes personal and professional details of our teachers and administrative staff, such as contact information, qualifications, and payroll details.
• Financial Information: The system processes data related to fee payments, including transaction history.
• Communication Data: Records of communications sent through the ERP system, such as messages and notifications between teachers, parents, and students.
• Technical Information: We may collect log data, including IP addresses, browser type, and usage details, to ensure the security and optimal performance of the ERP system.

2. How We Use Your Information

The information we collect is used to support the educational and administrative functions of our school. Key purposes include:

• Student Administration: Managing admissions, enrollment, attendance, and academic progress.
• Communication: Facilitating effective communication between the school, parents, and students.
• Financial Management: Processing fees, managing accounts, and generating financial reports.
• School Operations: Streamlining daily administrative tasks, managing timetables, and coordinating transportation and other school resources.
• Legal Compliance: Adhering to legal and regulatory requirements.

3. Data Sharing and Disclosure

We are committed to not selling or renting your personal information to third parties. We may share information with the following parties under specific circumstances:

• Third-Party Service Providers: We may engage with trusted third-party services for functions such as online payment processing or data hosting. These providers are contractually obligated to protect your data.
• Legal Obligations: We may disclose information if required by law or in response to valid legal requests from government authorities.
• Emergency Situations: In the event of an emergency, we may share necessary information to protect the health and safety of our students and staff.

4. Data Security

We have implemented robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Access Control: Limiting access to personal data to authorized personnel only.
• Data Encryption: Encrypting sensitive data to ensure its confidentiality.
• Regular Security Audits: Conducting periodic reviews of our security practices to identify and address potential vulnerabilities.

5. Your Rights and Choices

You have certain rights regarding your personal information, including:

• Access and Correction: You have the right to access and request corrections to your personal information.
• Data Portability: You may have the right to receive your data in a portable format.
• Deletion: You can request the deletion of your personal information, subject to our legal and contractual obligations.

To exercise these rights, please contact us through the details provided below.

6. Children's Privacy

We are dedicated to protecting the privacy of children. Our collection and use of student data, particularly for students under the age of 13, is in compliance with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA). We do not knowingly collect personal information from children without parental consent.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our website and updating the effective date.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

[Your School's Contact Information]