Privacy Policy

1. Purpose & Core Principles

This policy governs the collection, processing, storage, and sharing of student personal data. Our institution is committed to maintaining the highest standards of data security, transparency, and compliance with applicable data protection legislation.

2. Core Commitments

• Purpose Limitation: Student data is collected solely for legitimate educational, administrative, verification, and developmental purposes.
• Data Minimization: We collect only the data strictly necessary to support educational outcomes and institutional operations.
• Non-Commercialization: Student personal data is never sold, rented, or monetized for marketing or commercial advertising.

3. Information We Collect

We collect only the necessary data required to support educational outcomes, administrative functions, and student safety:

• Identity Data: Legal name, date of birth, student ID number, and profile photograph.
• Contact Information: Mailing address, email address, phone number, and emergency contact details.
• Academic Records: Grades, scores, sprint evaluations, and records in events conducted by Scope.
• Parent/Guardian Information: Names, contact details, custody arrangements (where applicable), and communication preferences.

4. How We Use Student Data

Student data is utilized exclusively for educational and administrative functions:

• Instruction & Evaluation: Delivering coursework briefs, recording academic progress, issuing certificates and transcripts, and providing learning feedback.
• Institutional Reporting: Generating anonymized statistical reports for educational accreditation, benchmarking, and legal compliance.

5. Data Sharing and Disclosure

We strictly limit who can access student data. Data is shared only under the following circumstances:

• Authorized School Personnel: Teachers, administrators, and staff with a legitimate educational interest.
• Parents and Legal Guardians: In accordance with FERPA guidelines or applicable local age-of-consent laws.
• Vetted Third-Party Service Providers: EdTech vendors and infrastructure providers bound by contractual data processing agreements to protect student data and limit its use strictly to the specified service.
• Legal Requirements: In response to a valid court order, subpoena, or statutory safety emergency.

6. Parental & Student Rights

Parents and eligible students maintain the following rights:

• Inspect & Review: Access the student's official educational records within 45 days of a written request.
• Request Correction: Challenge and request amendments to inaccuracies or misleading information in the record.
• Directory Opt-Out: Opt out of the public release of directory information, such as yearbooks, graduation programs, and showcase rosters.

7. Data Security & Storage

We maintain technical, administrative, and physical safeguards to prevent unauthorized access, loss, or disclosure:

• Encryption: Scope Connect protects data in transit using HTTPS/TLS. Stored database records use provider-managed encryption (AES-256), and user passwords are protected using secure one-way cryptographic hashing.
• Access Control: Role-based access controls (RBAC) ensure staff members can access only the data necessary to perform their specific duties.
• Data Retention: Student data is retained only for as long as required by law or academic record-keeping standards, after which it is securely destroyed or anonymized.

8. Student Data Breach Notification

In the event of a confirmed data breach that impacts student personal information:

• We will notify affected students, parents or guardians, and relevant regulatory authorities without unreasonable delay.
• The notification will describe the nature of the breach, the data involved, steps taken to mitigate harm, and recommended precautionary measures.

9. Contact Us

If you have questions, privacy concerns, or wish to exercise your data rights, please contact our Data Protection Officer: