1. Who we are

This Privacy Policy is issued by Ccidence Service Limited ("we", "us", "our"), operating the ControlPoint EduOS platform. We act as the data controller for personal data processed through the service.

2. Personal data we collect

Account data: name, email, login credentials, role.
School operational data: student, staff, parent, attendance, fee, and academic records entered by school users.
Support communications: messages you send to our support team.
Usage and telemetry: pages visited, actions taken, error logs.
Device and network data: IP address, browser, device identifiers.

3. Why we use it

Providing the ControlPoint EduOS service (contract performance).
Account creation, authentication, and access control.
Customer support and communication.
Security, fraud prevention, and abuse detection (legitimate interests).
Product improvement, analytics, and diagnostics.
Legal and regulatory compliance.

4. Legal bases

We rely on contract performance, legitimate interests, consent (where required for optional processing), and legal obligation as appropriate under applicable law.

5. Sharing with third parties

Hosting, infrastructure, and analytics subprocessors that help us operate the service.
Banking and card-processing partners — to collect termly subscription payments and issue invoices and receipts.
Professional advisers (legal, accounting) where necessary.
Public authorities where required by law.

6. Data retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to meet legal, tax, or accounting obligations. Data is deleted or anonymised when it is no longer needed.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing of your personal data, and withdraw consent at any time. Contact us using the details below to exercise these rights. You may also lodge a complaint with your local data protection authority.

8. International transfers

Where personal data is transferred outside your jurisdiction, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

9. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, and audit logging, to protect personal data.

10. Cookies

We use essential cookies to run the service (authentication, session, security). Analytics cookies, where used, help us understand product usage. You can manage cookie preferences through your browser.

11. Contact

Ccidence Service Limited — privacy inquiries: privacy@controlpointadvisory.org