إشعار الخصوصية لأولياء الأمور

Draft: this text is under legal review and has not been approved yet. Square brackets are filled in later.

Privacy notice for guardians

[academy name]

• Who is responsible for your data: [academy name] is responsible for your data and your child's. The academy uses Velnix Academy OS to manage subscriptions, fees and attendance; Velnix processes the data on the academy's behalf and only on its instructions.
• What we collect:
  • About the child: name, date of birth, group and branch, attendance, subscription, fees and payments, and medical or emergency notes if you give them (stored encrypted).
  • About the guardian: name, phone, e-mail (optional), relationship, and your consent records.
  • We do not ask for national ID numbers or payment card data.
• Why: to register the child, follow the subscription, fees and attendance, and contact you about your child and fees.
• Your consent: we record every consent: who, when, which text, for what purpose. You can withdraw your consent to messages at any time, and the withdrawal is recorded too.
• Where the data is kept: [to be completed once the server is running]. If you choose to be contacted on WhatsApp, e-mail or SMS, the message passes through that service's provider.
• Who it is shared with: never sold or used for advertising. Shared only with the service providers needed to run the system (a published list), or where the law requires it.
• How long: while the child is enrolled, then [period set by the lawyer] for the accounts, then deleted. Registration requests that are not accepted are deleted after [period].
• Your rights: ask the academy to see, correct or delete your data, or to withdraw your consent: [academy phone/e-mail].
• Protection: the data travels encrypted, only the academy staff who need it can reach it, sensitive actions are logged, and backups are encrypted.
• Last updated: [date], version [number].