Privacy Notice

This notice explains how Inulewa Akinjayeju, trading as Herlex Educonsult, a sole trader registered in the United Kingdom, handles personal data in Easitrack School Management Hub.

1. Who is responsible

Inulewa Akinjayeju, trading as Herlex Educonsult is the data controller for account holders' data (names, emails, login and billing-related account information) and for website usage data. For the pupil, parent and staff records a school enters, the school is the controller and we act as its processor, handling that data only on the school's instructions to provide the Service.

2. Data we collect and why

• Account data (name, email, password hash, school role) — to create and secure your account and provide the Service (contract).
• School records (pupil, parent, staff, attendance, academic and fee records) — processed on the school's behalf to provide the Service (contract with the school).
• Support messages — to answer enquiries (contract / legitimate interests).
• Usage and device data (IP address, browser, device identifiers, logs) — for security, fraud prevention and improving the Service (legitimate interests).
• Marketing preferences — only where you have opted in (consent, which you can withdraw at any time).

3. Who we share data with

• Service providers and subprocessors that host and run the Service (cloud hosting, database, email delivery).
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities where required by law.

We never sell personal data.

4. International transfers

Some providers may process data outside the UK. Where this happens we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Standard Contractual Clauses to protect it.

5. Retention

We keep account data while your account is active. When a school closes its account, its records are available for export for 30 days and then deleted or anonymised, except where we must keep limited information for legal, tax or accounting reasons.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, strict per-school data separation, role-based access controls and audit logs.

7. Your rights

Under UK GDPR you have the right to access, correct, erase, restrict or object to processing of your data, to data portability, and to withdraw consent. We respond within one month. Requests about school records should go to the school first. You may complain to the UK Information Commissioner's Office (ico.org.uk).

8. Cookies

We use only essential cookies and local storage needed to keep you signed in and remember your language. We do not use advertising cookies.