Privacy Policy

A school normally decides why and how learner, guardian, and staff information is used. In that setting, the school is the responsible party and S6 Schools processes information for the school under its instructions and agreement.

S6 Schools is responsible for information it collects for its own purposes, such as pilot enquiries, platform security records, and service administration. A school's own privacy notice and contract may add details that apply to its community.

• Account, identity, role, and school-assignment details.
• Learner, guardian, admissions, attendance, academic, behaviour, support, and finance records entered by an authorised school.
• Messages, files, reports, consent choices, and workflow approvals.
• Technical, sign-in, device, audit, and security-event information needed to protect and operate the service.
• Contact details supplied for support, pilot, or service enquiries.

Information is used to deliver authorised school workflows, provide role-scoped access, communicate with users, generate school records and reports, support users, prevent abuse, maintain audit trails, meet legal duties, and improve service reliability. We do not sell personal information.

School records can include information about children and other sensitive categories. Access is limited by school, role, class, department, and workflow where applicable. Schools must ensure that they have an appropriate justification or authorisation for collection and use, and must avoid entering information that is not needed for an authorised school purpose.

Information may be available to authorised school users and contracted providers that support hosting, storage, email, messaging, security, monitoring, backup, payment, or document services. Providers receive only the access needed for their task and are subject to safeguards. Information may also be disclosed when required by law or to protect users and the service.

School records are kept according to the school's instructions, contractual settings, recordkeeping duties, and applicable law. Security and audit records may be retained for a reasonable period to investigate incidents and demonstrate accountability. Information is deleted or de-identified when it is no longer required, subject to lawful retention duties.

Safeguards include tenant and role scoping, encryption in transit, protected credentials, short-lived access sessions, multi-factor authentication for sensitive roles, audit logs, rate limiting, malware scanning, backups, and controlled report publication.

You may ask to access or correct personal information, object to certain processing, or request deletion where the law permits. For school records, contact the school first because it controls those records. S6 Schools will assist the school with verified requests.

If a concern is not resolved, you may contact the Information Regulator (South Africa) through its official complaints service at inforegulator.org.za/complaints.

For privacy questions about a school record, contact the school's Information Officer. For S6 Schools platform questions, email pilots@s6schools.co.za.

Material updates will be dated on this page and, where appropriate, communicated to contracted schools before they take effect.