School data-protection notice

School data-processing authorisation I confirm that I am authorised to register and act for this school. On the school's behalf, I authorise Sajama Campus to collect, store and process information necessary to provide the school-management services requested by the school: school and account details, student and guardian records, staff assignments, attendance, lesson materials, submissions, results, platform-payment records, support requests and security/audit logs. Processing is limited to operating and supporting these services, maintaining security, recording payments, producing the school's reports and meeting applicable legal obligations. This authorisation is not permission to sell personal data, use identifiable pupil work to train general-purpose AI, send unrelated marketing, or make unrelated secondary uses. Any optional purpose requiring consent must be explained and offered separately. The school is responsible for the lawfulness and accuracy of information it supplies, appropriate notices to staff, parents and pupils, and obtaining any authority or consent required for children or other individuals. A school representative's acceptance does not waive an individual's rights or replace a lawful basis required by applicable law. Sajama remains responsible for its own applicable obligations. Access is limited by role, school membership and the service's access rules. Service providers used for hosting, authentication, email and payments may process necessary information to deliver those services; payment credentials are handled by the payment provider. The school may request information about current providers, hosting locations and international transfers before uploading personal data. No unrestricted sharing with other schools is authorised. The school must remove access for departing staff, safeguard accounts and promptly report suspected unauthorised access. Security measures reduce risk but do not guarantee that a breach cannot occur. Suspected incidents should be reported to support@sajamacampus.com; applicable notification duties still apply. Information is retained for providing the service and applicable legal, accounting and security needs. Retention periods, export, contract termination, deletion, backup expiry and any lawful holds must be agreed with the school; deleting an account is not a guarantee of immediate erasure from backups or providers. Contact support@sajamacampus.com to request access, correction, export, restriction, deletion or information about applicable rights. Payment restrictions do not remove statutory privacy rights. The school acknowledges this notice and instructs processing for the stated service purposes. Changes introducing new purposes require an updated notice and any additional authority required by law. This acceptance does not exclude liability or rights that cannot lawfully be excluded. The deployed privacy policy and school agreement must be reviewed for the school's jurisdiction before live personal data is collected.