Commitment to Privacy
We treat every piece of data as a matter of trust. Our systems, processes, and policies are designed with privacy-by-default, ensuring student welfare is never compromised.
Information Collected
User Information
- Full name and professional role
- Institutional affiliation
- Contact details
Student Information
- Academic performance data
- Behavioral observations
- Screening results
- Intervention records
Purpose of Data Collection
Data collected on BioLEX is used exclusively to:
- Support targeted learning interventions
- Generate professional assessment reports
- Monitor student progress over time
- Improve overall educational outcomes
- Conduct fully anonymized research
Legal Basis for Processing
Data processing occurs under one or more of the following lawful bases:
- Institutional authorization
- Parent or guardian informed consent
- Legitimate educational interest
Data Sharing
Data may be shared only with the following authorized parties:
- Authorized school personnel
- Parents or legal guardians
- Approved educational professionals
- Legal authorities when required by applicable law
Data Security
BioLEX applies industry-leading security measures across all layers:
- End-to-end encryption protocols
- Secure, redundant cloud storage
- Role-based access control (RBAC)
- Regular and automated security monitoring
Data Retention
Data is retained only for as long as necessary to fulfill its educational purpose or to comply with legal obligations. Upon expiry, data is securely deleted or irreversibly anonymized.
Your Rights
All users and data subjects may request:
- Access to their personal data held by BioLEX
- Correction of any inaccuracies in their records
- Deletion of data where legally permissible
Access Control
Access to student data is strictly limited by assigned role:
| Role | Access Level |
|---|---|
| Teacher | Assigned students only |
| Counselor | Assessment data |
| Administrator | Institutional overview |
| Parent / Guardian | Own child only |
Data Storage
All data is securely stored using internationally accepted standards, aligned with:
- Principles and best practices
- Child data protection best practices
Breach Notification
In the event of a data breach, BioLEX will notify all affected institutions within a reasonable timeframe in accordance with applicable legal requirements, and will take immediate corrective action.
Informed Consent Policy
Parent / Guardian Consent
Schools must obtain informed consent before entering any student data. Consent must clearly explain:
- The purpose and scope of screening
- The type of data to be collected
- How reports will be used
- The right to withdraw consent at any time
Withdrawal of Consent
Parents and guardians may withdraw consent at any time, subject to applicable legal or institutional obligations.